test_sigma_dut.py 96 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988198919901991199219931994199519961997199819992000200120022003200420052006200720082009201020112012201320142015201620172018201920202021202220232024202520262027202820292030203120322033203420352036203720382039204020412042204320442045204620472048204920502051205220532054205520562057205820592060206120622063206420652066206720682069207020712072207320742075207620772078207920802081
  1. # Test cases for sigma_dut
  2. # Copyright (c) 2017, Qualcomm Atheros, Inc.
  3. #
  4. # This software may be distributed under the terms of the BSD license.
  5. # See README for more details.
  6. import logging
  7. logger = logging.getLogger()
  8. import os
  9. import socket
  10. import subprocess
  11. import threading
  12. import time
  13. import hostapd
  14. from utils import HwsimSkip
  15. from hwsim import HWSimRadio
  16. from test_dpp import check_dpp_capab, update_hapd_config
  17. from test_suite_b import check_suite_b_192_capa, suite_b_as_params, suite_b_192_rsa_ap_params
  18. def check_sigma_dut():
  19. if not os.path.exists("./sigma_dut"):
  20. raise HwsimSkip("sigma_dut not available")
  21. def sigma_dut_cmd(cmd, port=9000, timeout=2):
  22. sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM,
  23. socket.IPPROTO_TCP)
  24. sock.settimeout(timeout)
  25. addr = ('127.0.0.1', port)
  26. sock.connect(addr)
  27. sock.send(cmd + "\r\n")
  28. try:
  29. res = sock.recv(1000)
  30. running = False
  31. done = False
  32. for line in res.splitlines():
  33. if line.startswith("status,RUNNING"):
  34. running = True
  35. elif line.startswith("status,INVALID"):
  36. done = True
  37. elif line.startswith("status,ERROR"):
  38. done = True
  39. elif line.startswith("status,COMPLETE"):
  40. done = True
  41. if running and not done:
  42. # Read the actual response
  43. res = sock.recv(1000)
  44. except:
  45. res = ''
  46. pass
  47. sock.close()
  48. res = res.rstrip()
  49. logger.debug("sigma_dut: '%s' --> '%s'" % (cmd, res))
  50. return res
  51. def sigma_dut_cmd_check(cmd, port=9000, timeout=2):
  52. res = sigma_dut_cmd(cmd, port=port, timeout=timeout)
  53. if "COMPLETE" not in res:
  54. raise Exception("sigma_dut command failed: " + cmd)
  55. return res
  56. def start_sigma_dut(ifname, debug=False, hostapd_logdir=None, cert_path=None):
  57. check_sigma_dut()
  58. cmd = [ './sigma_dut',
  59. '-M', ifname,
  60. '-S', ifname,
  61. '-F', '../../hostapd/hostapd',
  62. '-G',
  63. '-w', '/var/run/wpa_supplicant/',
  64. '-j', ifname ]
  65. if debug:
  66. cmd += [ '-d' ]
  67. if hostapd_logdir:
  68. cmd += [ '-H', hostapd_logdir ]
  69. if cert_path:
  70. cmd += [ '-C', cert_path ]
  71. sigma = subprocess.Popen(cmd, stdout=subprocess.PIPE,
  72. stderr=subprocess.PIPE)
  73. for i in range(20):
  74. try:
  75. res = sigma_dut_cmd("HELLO")
  76. break
  77. except:
  78. time.sleep(0.05)
  79. return sigma
  80. def stop_sigma_dut(sigma):
  81. sigma.terminate()
  82. sigma.wait()
  83. out, err = sigma.communicate()
  84. logger.debug("sigma_dut stdout: " + str(out))
  85. logger.debug("sigma_dut stderr: " + str(err))
  86. def sigma_dut_wait_connected(ifname):
  87. for i in range(50):
  88. res = sigma_dut_cmd("sta_is_connected,interface," + ifname)
  89. if "connected,1" in res:
  90. break
  91. time.sleep(0.2)
  92. if i == 49:
  93. raise Exception("Connection did not complete")
  94. def test_sigma_dut_basic(dev, apdev):
  95. """sigma_dut basic functionality"""
  96. sigma = start_sigma_dut(dev[0].ifname)
  97. res = sigma_dut_cmd("UNKNOWN")
  98. if "status,INVALID,errorCode,Unknown command" not in res:
  99. raise Exception("Unexpected sigma_dut response to unknown command")
  100. tests = [ ("ca_get_version", "status,COMPLETE,version,1.0"),
  101. ("device_get_info", "status,COMPLETE,vendor"),
  102. ("device_list_interfaces,interfaceType,foo", "status,ERROR"),
  103. ("device_list_interfaces,interfaceType,802.11",
  104. "status,COMPLETE,interfaceType,802.11,interfaceID," + dev[0].ifname) ]
  105. for cmd, response in tests:
  106. res = sigma_dut_cmd(cmd)
  107. if response not in res:
  108. raise Exception("Unexpected %s response: %s" % (cmd, res))
  109. stop_sigma_dut(sigma)
  110. def test_sigma_dut_open(dev, apdev):
  111. """sigma_dut controlled open network association"""
  112. try:
  113. run_sigma_dut_open(dev, apdev)
  114. finally:
  115. dev[0].set("ignore_old_scan_res", "0")
  116. def run_sigma_dut_open(dev, apdev):
  117. ifname = dev[0].ifname
  118. sigma = start_sigma_dut(ifname)
  119. hapd = hostapd.add_ap(apdev[0], { "ssid": "open" })
  120. sigma_dut_cmd_check("sta_set_ip_config,interface,%s,dhcp,0,ip,127.0.0.11,mask,255.255.255.0" % ifname)
  121. sigma_dut_cmd_check("sta_set_encryption,interface,%s,ssid,%s,encpType,none" % (ifname, "open"))
  122. sigma_dut_cmd_check("sta_associate,interface,%s,ssid,%s" % (ifname, "open"))
  123. sigma_dut_wait_connected(ifname)
  124. sigma_dut_cmd_check("sta_get_ip_config,interface," + ifname)
  125. sigma_dut_cmd_check("sta_disconnect,interface," + ifname)
  126. sigma_dut_cmd_check("sta_reset_default,interface," + ifname)
  127. stop_sigma_dut(sigma)
  128. def test_sigma_dut_psk_pmf(dev, apdev):
  129. """sigma_dut controlled PSK+PMF association"""
  130. try:
  131. run_sigma_dut_psk_pmf(dev, apdev)
  132. finally:
  133. dev[0].set("ignore_old_scan_res", "0")
  134. def run_sigma_dut_psk_pmf(dev, apdev):
  135. ifname = dev[0].ifname
  136. sigma = start_sigma_dut(ifname)
  137. ssid = "test-pmf-required"
  138. params = hostapd.wpa2_params(ssid=ssid, passphrase="12345678")
  139. params["wpa_key_mgmt"] = "WPA-PSK-SHA256"
  140. params["ieee80211w"] = "2"
  141. hapd = hostapd.add_ap(apdev[0], params)
  142. sigma_dut_cmd_check("sta_reset_default,interface,%s,prog,PMF" % ifname)
  143. sigma_dut_cmd_check("sta_set_ip_config,interface,%s,dhcp,0,ip,127.0.0.11,mask,255.255.255.0" % ifname)
  144. sigma_dut_cmd_check("sta_set_psk,interface,%s,ssid,%s,passphrase,%s,encpType,aes-ccmp,keymgmttype,wpa2,PMF,Required" % (ifname, "test-pmf-required", "12345678"))
  145. sigma_dut_cmd_check("sta_associate,interface,%s,ssid,%s,channel,1" % (ifname, "test-pmf-required"))
  146. sigma_dut_wait_connected(ifname)
  147. sigma_dut_cmd_check("sta_get_ip_config,interface," + ifname)
  148. sigma_dut_cmd_check("sta_disconnect,interface," + ifname)
  149. sigma_dut_cmd_check("sta_reset_default,interface," + ifname)
  150. stop_sigma_dut(sigma)
  151. def test_sigma_dut_psk_pmf_bip_cmac_128(dev, apdev):
  152. """sigma_dut controlled PSK+PMF association with BIP-CMAC-128"""
  153. try:
  154. run_sigma_dut_psk_pmf_cipher(dev, apdev, "BIP-CMAC-128", "AES-128-CMAC")
  155. finally:
  156. dev[0].set("ignore_old_scan_res", "0")
  157. def test_sigma_dut_psk_pmf_bip_cmac_256(dev, apdev):
  158. """sigma_dut controlled PSK+PMF association with BIP-CMAC-256"""
  159. try:
  160. run_sigma_dut_psk_pmf_cipher(dev, apdev, "BIP-CMAC-256", "BIP-CMAC-256")
  161. finally:
  162. dev[0].set("ignore_old_scan_res", "0")
  163. def test_sigma_dut_psk_pmf_bip_gmac_128(dev, apdev):
  164. """sigma_dut controlled PSK+PMF association with BIP-GMAC-128"""
  165. try:
  166. run_sigma_dut_psk_pmf_cipher(dev, apdev, "BIP-GMAC-128", "BIP-GMAC-128")
  167. finally:
  168. dev[0].set("ignore_old_scan_res", "0")
  169. def test_sigma_dut_psk_pmf_bip_gmac_256(dev, apdev):
  170. """sigma_dut controlled PSK+PMF association with BIP-GMAC-256"""
  171. try:
  172. run_sigma_dut_psk_pmf_cipher(dev, apdev, "BIP-GMAC-256", "BIP-GMAC-256")
  173. finally:
  174. dev[0].set("ignore_old_scan_res", "0")
  175. def test_sigma_dut_psk_pmf_bip_gmac_256_mismatch(dev, apdev):
  176. """sigma_dut controlled PSK+PMF association with BIP-GMAC-256 mismatch"""
  177. try:
  178. run_sigma_dut_psk_pmf_cipher(dev, apdev, "BIP-GMAC-256", "AES-128-CMAC",
  179. failure=True)
  180. finally:
  181. dev[0].set("ignore_old_scan_res", "0")
  182. def run_sigma_dut_psk_pmf_cipher(dev, apdev, sigma_cipher, hostapd_cipher,
  183. failure=False):
  184. ifname = dev[0].ifname
  185. sigma = start_sigma_dut(ifname)
  186. ssid = "test-pmf-required"
  187. params = hostapd.wpa2_params(ssid=ssid, passphrase="12345678")
  188. params["wpa_key_mgmt"] = "WPA-PSK-SHA256"
  189. params["ieee80211w"] = "2"
  190. params["group_mgmt_cipher"] = hostapd_cipher
  191. hapd = hostapd.add_ap(apdev[0], params)
  192. sigma_dut_cmd_check("sta_reset_default,interface,%s,prog,PMF" % ifname)
  193. sigma_dut_cmd_check("sta_set_ip_config,interface,%s,dhcp,0,ip,127.0.0.11,mask,255.255.255.0" % ifname)
  194. sigma_dut_cmd_check("sta_set_psk,interface,%s,ssid,%s,passphrase,%s,encpType,aes-ccmp,keymgmttype,wpa2,PMF,Required,GroupMgntCipher,%s" % (ifname, "test-pmf-required", "12345678", sigma_cipher))
  195. sigma_dut_cmd_check("sta_associate,interface,%s,ssid,%s,channel,1" % (ifname, "test-pmf-required"))
  196. if failure:
  197. ev = dev[0].wait_event(["CTRL-EVENT-NETWORK-NOT-FOUND",
  198. "CTRL-EVENT-CONNECTED"], timeout=10)
  199. if ev is None:
  200. raise Exception("Network selection result not indicated")
  201. if "CTRL-EVENT-CONNECTED" in ev:
  202. raise Exception("Unexpected connection")
  203. res = sigma_dut_cmd("sta_is_connected,interface," + ifname)
  204. if "connected,1" in res:
  205. raise Exception("Connection reported")
  206. else:
  207. sigma_dut_wait_connected(ifname)
  208. sigma_dut_cmd_check("sta_get_ip_config,interface," + ifname)
  209. sigma_dut_cmd_check("sta_disconnect,interface," + ifname)
  210. sigma_dut_cmd_check("sta_reset_default,interface," + ifname)
  211. stop_sigma_dut(sigma)
  212. def test_sigma_dut_sae(dev, apdev):
  213. """sigma_dut controlled SAE association"""
  214. if "SAE" not in dev[0].get_capability("auth_alg"):
  215. raise HwsimSkip("SAE not supported")
  216. ifname = dev[0].ifname
  217. sigma = start_sigma_dut(ifname)
  218. ssid = "test-sae"
  219. params = hostapd.wpa2_params(ssid=ssid, passphrase="12345678")
  220. params['wpa_key_mgmt'] = 'SAE'
  221. params["ieee80211w"] = "2"
  222. hapd = hostapd.add_ap(apdev[0], params)
  223. sigma_dut_cmd_check("sta_reset_default,interface,%s" % ifname)
  224. sigma_dut_cmd_check("sta_set_ip_config,interface,%s,dhcp,0,ip,127.0.0.11,mask,255.255.255.0" % ifname)
  225. sigma_dut_cmd_check("sta_set_security,interface,%s,ssid,%s,passphrase,%s,type,SAE,encpType,aes-ccmp,keymgmttype,wpa2" % (ifname, "test-sae", "12345678"))
  226. sigma_dut_cmd_check("sta_associate,interface,%s,ssid,%s,channel,1" % (ifname, "test-sae"))
  227. sigma_dut_wait_connected(ifname)
  228. sigma_dut_cmd_check("sta_get_ip_config,interface," + ifname)
  229. if dev[0].get_status_field('sae_group') != '19':
  230. raise Exception("Expected default SAE group not used")
  231. sigma_dut_cmd_check("sta_disconnect,interface," + ifname)
  232. sigma_dut_cmd_check("sta_reset_default,interface," + ifname)
  233. sigma_dut_cmd_check("sta_set_ip_config,interface,%s,dhcp,0,ip,127.0.0.11,mask,255.255.255.0" % ifname)
  234. sigma_dut_cmd_check("sta_set_security,interface,%s,ssid,%s,passphrase,%s,type,SAE,encpType,aes-ccmp,keymgmttype,wpa2,ECGroupID,20" % (ifname, "test-sae", "12345678"))
  235. sigma_dut_cmd_check("sta_associate,interface,%s,ssid,%s,channel,1" % (ifname, "test-sae"))
  236. sigma_dut_wait_connected(ifname)
  237. sigma_dut_cmd_check("sta_get_ip_config,interface," + ifname)
  238. if dev[0].get_status_field('sae_group') != '20':
  239. raise Exception("Expected SAE group not used")
  240. sigma_dut_cmd_check("sta_disconnect,interface," + ifname)
  241. sigma_dut_cmd_check("sta_reset_default,interface," + ifname)
  242. stop_sigma_dut(sigma)
  243. def test_sigma_dut_sae_password(dev, apdev):
  244. """sigma_dut controlled SAE association and long password"""
  245. if "SAE" not in dev[0].get_capability("auth_alg"):
  246. raise HwsimSkip("SAE not supported")
  247. ifname = dev[0].ifname
  248. sigma = start_sigma_dut(ifname)
  249. try:
  250. ssid = "test-sae"
  251. params = hostapd.wpa2_params(ssid=ssid)
  252. params['sae_password'] = 100*'B'
  253. params['wpa_key_mgmt'] = 'SAE'
  254. params["ieee80211w"] = "2"
  255. hapd = hostapd.add_ap(apdev[0], params)
  256. sigma_dut_cmd_check("sta_reset_default,interface,%s" % ifname)
  257. sigma_dut_cmd_check("sta_set_ip_config,interface,%s,dhcp,0,ip,127.0.0.11,mask,255.255.255.0" % ifname)
  258. sigma_dut_cmd_check("sta_set_security,interface,%s,ssid,%s,passphrase,%s,type,SAE,encpType,aes-ccmp,keymgmttype,wpa2" % (ifname, "test-sae", 100*'B'))
  259. sigma_dut_cmd_check("sta_associate,interface,%s,ssid,%s,channel,1" % (ifname, "test-sae"))
  260. sigma_dut_wait_connected(ifname)
  261. sigma_dut_cmd_check("sta_get_ip_config,interface," + ifname)
  262. sigma_dut_cmd_check("sta_disconnect,interface," + ifname)
  263. sigma_dut_cmd_check("sta_reset_default,interface," + ifname)
  264. finally:
  265. stop_sigma_dut(sigma)
  266. def test_sigma_dut_sta_override_rsne(dev, apdev):
  267. """sigma_dut and RSNE override on STA"""
  268. try:
  269. run_sigma_dut_sta_override_rsne(dev, apdev)
  270. finally:
  271. dev[0].set("ignore_old_scan_res", "0")
  272. def run_sigma_dut_sta_override_rsne(dev, apdev):
  273. ifname = dev[0].ifname
  274. sigma = start_sigma_dut(ifname)
  275. ssid = "test-psk"
  276. params = hostapd.wpa2_params(ssid=ssid, passphrase="12345678")
  277. hapd = hostapd.add_ap(apdev[0], params)
  278. sigma_dut_cmd_check("sta_set_ip_config,interface,%s,dhcp,0,ip,127.0.0.11,mask,255.255.255.0" % ifname)
  279. tests = [ "30120100000fac040100000fac040100000fac02",
  280. "30140100000fac040100000fac040100000fac02ffff" ]
  281. for test in tests:
  282. sigma_dut_cmd_check("sta_set_security,interface,%s,ssid,%s,type,PSK,passphrase,%s,EncpType,aes-ccmp,KeyMgmtType,wpa2" % (ifname, "test-psk", "12345678"))
  283. sigma_dut_cmd_check("dev_configure_ie,interface,%s,IE_Name,RSNE,Contents,%s" % (ifname, test))
  284. sigma_dut_cmd_check("sta_associate,interface,%s,ssid,%s,channel,1" % (ifname, "test-psk"))
  285. sigma_dut_wait_connected(ifname)
  286. sigma_dut_cmd_check("sta_disconnect,interface," + ifname)
  287. dev[0].dump_monitor()
  288. sigma_dut_cmd_check("sta_set_security,interface,%s,ssid,%s,type,PSK,passphrase,%s,EncpType,aes-ccmp,KeyMgmtType,wpa2" % (ifname, "test-psk", "12345678"))
  289. sigma_dut_cmd_check("dev_configure_ie,interface,%s,IE_Name,RSNE,Contents,300101" % ifname)
  290. sigma_dut_cmd_check("sta_associate,interface,%s,ssid,%s,channel,1" % (ifname, "test-psk"))
  291. ev = dev[0].wait_event(["CTRL-EVENT-ASSOC-REJECT"])
  292. if ev is None:
  293. raise Exception("Association rejection not reported")
  294. if "status_code=40" not in ev:
  295. raise Exception("Unexpected status code: " + ev)
  296. sigma_dut_cmd_check("sta_reset_default,interface," + ifname)
  297. stop_sigma_dut(sigma)
  298. def test_sigma_dut_ap_psk(dev, apdev):
  299. """sigma_dut controlled AP"""
  300. with HWSimRadio() as (radio, iface):
  301. sigma = start_sigma_dut(iface)
  302. try:
  303. sigma_dut_cmd_check("ap_reset_default")
  304. sigma_dut_cmd_check("ap_set_wireless,NAME,AP,CHANNEL,1,SSID,test-psk,MODE,11ng")
  305. sigma_dut_cmd_check("ap_set_security,NAME,AP,KEYMGNT,WPA2-PSK,PSK,12345678")
  306. sigma_dut_cmd_check("ap_config_commit,NAME,AP")
  307. dev[0].connect("test-psk", psk="12345678", scan_freq="2412")
  308. sigma_dut_cmd_check("ap_reset_default")
  309. finally:
  310. stop_sigma_dut(sigma)
  311. def test_sigma_dut_ap_pskhex(dev, apdev, params):
  312. """sigma_dut controlled AP and PSKHEX"""
  313. logdir = os.path.join(params['logdir'],
  314. "sigma_dut_ap_pskhex.sigma-hostapd")
  315. with HWSimRadio() as (radio, iface):
  316. sigma = start_sigma_dut(iface, hostapd_logdir=logdir)
  317. try:
  318. psk = "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef"
  319. sigma_dut_cmd_check("ap_reset_default")
  320. sigma_dut_cmd_check("ap_set_wireless,NAME,AP,CHANNEL,1,SSID,test-psk,MODE,11ng")
  321. sigma_dut_cmd_check("ap_set_security,NAME,AP,KEYMGNT,WPA2-PSK,PSKHEX," + psk)
  322. sigma_dut_cmd_check("ap_config_commit,NAME,AP")
  323. dev[0].connect("test-psk", raw_psk=psk, scan_freq="2412")
  324. sigma_dut_cmd_check("ap_reset_default")
  325. finally:
  326. stop_sigma_dut(sigma)
  327. def test_sigma_dut_suite_b(dev, apdev, params):
  328. """sigma_dut controlled STA Suite B"""
  329. check_suite_b_192_capa(dev)
  330. logdir = params['logdir']
  331. with open("auth_serv/ec2-ca.pem", "r") as f:
  332. with open(os.path.join(logdir, "suite_b_ca.pem"), "w") as f2:
  333. f2.write(f.read())
  334. with open("auth_serv/ec2-user.pem", "r") as f:
  335. with open("auth_serv/ec2-user.key", "r") as f2:
  336. with open(os.path.join(logdir, "suite_b.pem"), "w") as f3:
  337. f3.write(f.read())
  338. f3.write(f2.read())
  339. dev[0].flush_scan_cache()
  340. params = suite_b_as_params()
  341. params['ca_cert'] = 'auth_serv/ec2-ca.pem'
  342. params['server_cert'] = 'auth_serv/ec2-server.pem'
  343. params['private_key'] = 'auth_serv/ec2-server.key'
  344. params['openssl_ciphers'] = 'SUITEB192'
  345. hostapd.add_ap(apdev[1], params)
  346. params = { "ssid": "test-suite-b",
  347. "wpa": "2",
  348. "wpa_key_mgmt": "WPA-EAP-SUITE-B-192",
  349. "rsn_pairwise": "GCMP-256",
  350. "group_mgmt_cipher": "BIP-GMAC-256",
  351. "ieee80211w": "2",
  352. "ieee8021x": "1",
  353. 'auth_server_addr': "127.0.0.1",
  354. 'auth_server_port': "18129",
  355. 'auth_server_shared_secret': "radius",
  356. 'nas_identifier': "nas.w1.fi" }
  357. hapd = hostapd.add_ap(apdev[0], params)
  358. ifname = dev[0].ifname
  359. sigma = start_sigma_dut(ifname, cert_path=logdir)
  360. sigma_dut_cmd_check("sta_reset_default,interface,%s,prog,PMF" % ifname)
  361. sigma_dut_cmd_check("sta_set_ip_config,interface,%s,dhcp,0,ip,127.0.0.11,mask,255.255.255.0" % ifname)
  362. sigma_dut_cmd_check("sta_set_security,type,eaptls,interface,%s,ssid,%s,PairwiseCipher,AES-GCMP-256,GroupCipher,AES-GCMP-256,GroupMgntCipher,BIP-GMAC-256,keymgmttype,SuiteB,clientCertificate,suite_b.pem,trustedRootCA,suite_b_ca.pem,CertType,ECC" % (ifname, "test-suite-b"))
  363. sigma_dut_cmd_check("sta_associate,interface,%s,ssid,%s,channel,1" % (ifname, "test-suite-b"))
  364. sigma_dut_wait_connected(ifname)
  365. sigma_dut_cmd_check("sta_get_ip_config,interface," + ifname)
  366. sigma_dut_cmd_check("sta_disconnect,interface," + ifname)
  367. sigma_dut_cmd_check("sta_reset_default,interface," + ifname)
  368. stop_sigma_dut(sigma)
  369. def test_sigma_dut_suite_b_rsa(dev, apdev, params):
  370. """sigma_dut controlled STA Suite B (RSA)"""
  371. check_suite_b_192_capa(dev)
  372. logdir = params['logdir']
  373. with open("auth_serv/rsa3072-ca.pem", "r") as f:
  374. with open(os.path.join(logdir, "suite_b_ca_rsa.pem"), "w") as f2:
  375. f2.write(f.read())
  376. with open("auth_serv/rsa3072-user.pem", "r") as f:
  377. with open("auth_serv/rsa3072-user.key", "r") as f2:
  378. with open(os.path.join(logdir, "suite_b_rsa.pem"), "w") as f3:
  379. f3.write(f.read())
  380. f3.write(f2.read())
  381. dev[0].flush_scan_cache()
  382. params = suite_b_192_rsa_ap_params()
  383. hapd = hostapd.add_ap(apdev[0], params)
  384. ifname = dev[0].ifname
  385. sigma = start_sigma_dut(ifname, cert_path=logdir)
  386. cmd = "sta_set_security,type,eaptls,interface,%s,ssid,%s,PairwiseCipher,AES-GCMP-256,GroupCipher,AES-GCMP-256,GroupMgntCipher,BIP-GMAC-256,keymgmttype,SuiteB,clientCertificate,suite_b_rsa.pem,trustedRootCA,suite_b_ca_rsa.pem,CertType,RSA" % (ifname, "test-suite-b")
  387. tests = [ "",
  388. ",TLSCipher,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
  389. ",TLSCipher,TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" ]
  390. for extra in tests:
  391. sigma_dut_cmd_check("sta_reset_default,interface,%s,prog,PMF" % ifname)
  392. sigma_dut_cmd_check("sta_set_ip_config,interface,%s,dhcp,0,ip,127.0.0.11,mask,255.255.255.0" % ifname)
  393. sigma_dut_cmd_check(cmd + extra)
  394. sigma_dut_cmd_check("sta_associate,interface,%s,ssid,%s,channel,1" % (ifname, "test-suite-b"))
  395. sigma_dut_wait_connected(ifname)
  396. sigma_dut_cmd_check("sta_get_ip_config,interface," + ifname)
  397. sigma_dut_cmd_check("sta_disconnect,interface," + ifname)
  398. sigma_dut_cmd_check("sta_reset_default,interface," + ifname)
  399. stop_sigma_dut(sigma)
  400. def test_sigma_dut_ap_suite_b(dev, apdev, params):
  401. """sigma_dut controlled AP Suite B"""
  402. check_suite_b_192_capa(dev)
  403. logdir = os.path.join(params['logdir'],
  404. "sigma_dut_ap_suite_b.sigma-hostapd")
  405. params = suite_b_as_params()
  406. params['ca_cert'] = 'auth_serv/ec2-ca.pem'
  407. params['server_cert'] = 'auth_serv/ec2-server.pem'
  408. params['private_key'] = 'auth_serv/ec2-server.key'
  409. params['openssl_ciphers'] = 'SUITEB192'
  410. hostapd.add_ap(apdev[1], params)
  411. with HWSimRadio() as (radio, iface):
  412. sigma = start_sigma_dut(iface, hostapd_logdir=logdir)
  413. try:
  414. sigma_dut_cmd_check("ap_reset_default")
  415. sigma_dut_cmd_check("ap_set_wireless,NAME,AP,CHANNEL,1,SSID,test-suite-b,MODE,11ng")
  416. sigma_dut_cmd_check("ap_set_radius,NAME,AP,IPADDR,127.0.0.1,PORT,18129,PASSWORD,radius")
  417. sigma_dut_cmd_check("ap_set_security,NAME,AP,KEYMGNT,SuiteB")
  418. sigma_dut_cmd_check("ap_config_commit,NAME,AP")
  419. dev[0].connect("test-suite-b", key_mgmt="WPA-EAP-SUITE-B-192",
  420. ieee80211w="2",
  421. openssl_ciphers="SUITEB192",
  422. eap="TLS", identity="tls user",
  423. ca_cert="auth_serv/ec2-ca.pem",
  424. client_cert="auth_serv/ec2-user.pem",
  425. private_key="auth_serv/ec2-user.key",
  426. pairwise="GCMP-256", group="GCMP-256",
  427. scan_freq="2412")
  428. sigma_dut_cmd_check("ap_reset_default")
  429. finally:
  430. stop_sigma_dut(sigma)
  431. def test_sigma_dut_ap_cipher_gcmp_128(dev, apdev, params):
  432. """sigma_dut controlled AP with GCMP-128/BIP-GMAC-128 cipher"""
  433. run_sigma_dut_ap_cipher(dev, apdev, params, "AES-GCMP-128", "BIP-GMAC-128",
  434. "GCMP")
  435. def test_sigma_dut_ap_cipher_gcmp_256(dev, apdev, params):
  436. """sigma_dut controlled AP with GCMP-256/BIP-GMAC-256 cipher"""
  437. run_sigma_dut_ap_cipher(dev, apdev, params, "AES-GCMP-256", "BIP-GMAC-256",
  438. "GCMP-256")
  439. def test_sigma_dut_ap_cipher_ccmp_128(dev, apdev, params):
  440. """sigma_dut controlled AP with CCMP-128/BIP-CMAC-128 cipher"""
  441. run_sigma_dut_ap_cipher(dev, apdev, params, "AES-CCMP-128", "BIP-CMAC-128",
  442. "CCMP")
  443. def test_sigma_dut_ap_cipher_ccmp_256(dev, apdev, params):
  444. """sigma_dut controlled AP with CCMP-256/BIP-CMAC-256 cipher"""
  445. run_sigma_dut_ap_cipher(dev, apdev, params, "AES-CCMP-256", "BIP-CMAC-256",
  446. "CCMP-256")
  447. def test_sigma_dut_ap_cipher_ccmp_gcmp_1(dev, apdev, params):
  448. """sigma_dut controlled AP with CCMP-128+GCMP-256 ciphers (1)"""
  449. run_sigma_dut_ap_cipher(dev, apdev, params, "AES-CCMP-128 AES-GCMP-256",
  450. "BIP-GMAC-256", "CCMP")
  451. def test_sigma_dut_ap_cipher_ccmp_gcmp_2(dev, apdev, params):
  452. """sigma_dut controlled AP with CCMP-128+GCMP-256 ciphers (2)"""
  453. run_sigma_dut_ap_cipher(dev, apdev, params, "AES-CCMP-128 AES-GCMP-256",
  454. "BIP-GMAC-256", "GCMP-256", "CCMP")
  455. def test_sigma_dut_ap_cipher_gcmp_256_group_ccmp(dev, apdev, params):
  456. """sigma_dut controlled AP with GCMP-256/CCMP/BIP-GMAC-256 cipher"""
  457. run_sigma_dut_ap_cipher(dev, apdev, params, "AES-GCMP-256", "BIP-GMAC-256",
  458. "GCMP-256", "CCMP", "AES-CCMP-128")
  459. def run_sigma_dut_ap_cipher(dev, apdev, params, ap_pairwise, ap_group_mgmt,
  460. sta_cipher, sta_cipher_group=None, ap_group=None):
  461. check_suite_b_192_capa(dev)
  462. logdir = os.path.join(params['logdir'],
  463. "sigma_dut_ap_cipher.sigma-hostapd")
  464. params = suite_b_as_params()
  465. params['ca_cert'] = 'auth_serv/ec2-ca.pem'
  466. params['server_cert'] = 'auth_serv/ec2-server.pem'
  467. params['private_key'] = 'auth_serv/ec2-server.key'
  468. params['openssl_ciphers'] = 'SUITEB192'
  469. hostapd.add_ap(apdev[1], params)
  470. with HWSimRadio() as (radio, iface):
  471. sigma = start_sigma_dut(iface, hostapd_logdir=logdir)
  472. try:
  473. sigma_dut_cmd_check("ap_reset_default")
  474. sigma_dut_cmd_check("ap_set_wireless,NAME,AP,CHANNEL,1,SSID,test-suite-b,MODE,11ng")
  475. sigma_dut_cmd_check("ap_set_radius,NAME,AP,IPADDR,127.0.0.1,PORT,18129,PASSWORD,radius")
  476. cmd = "ap_set_security,NAME,AP,KEYMGNT,SuiteB,PMF,Required,PairwiseCipher,%s,GroupMgntCipher,%s" % (ap_pairwise, ap_group_mgmt)
  477. if ap_group:
  478. cmd += ",GroupCipher,%s" % ap_group
  479. sigma_dut_cmd_check(cmd)
  480. sigma_dut_cmd_check("ap_config_commit,NAME,AP")
  481. if sta_cipher_group is None:
  482. sta_cipher_group = sta_cipher
  483. dev[0].connect("test-suite-b", key_mgmt="WPA-EAP-SUITE-B-192",
  484. ieee80211w="2",
  485. openssl_ciphers="SUITEB192",
  486. eap="TLS", identity="tls user",
  487. ca_cert="auth_serv/ec2-ca.pem",
  488. client_cert="auth_serv/ec2-user.pem",
  489. private_key="auth_serv/ec2-user.key",
  490. pairwise=sta_cipher, group=sta_cipher_group,
  491. scan_freq="2412")
  492. sigma_dut_cmd_check("ap_reset_default")
  493. finally:
  494. stop_sigma_dut(sigma)
  495. def test_sigma_dut_ap_override_rsne(dev, apdev):
  496. """sigma_dut controlled AP overriding RSNE"""
  497. with HWSimRadio() as (radio, iface):
  498. sigma = start_sigma_dut(iface)
  499. try:
  500. sigma_dut_cmd_check("ap_reset_default")
  501. sigma_dut_cmd_check("ap_set_wireless,NAME,AP,CHANNEL,1,SSID,test-psk,MODE,11ng")
  502. sigma_dut_cmd_check("ap_set_security,NAME,AP,KEYMGNT,WPA2-PSK,PSK,12345678")
  503. sigma_dut_cmd_check("dev_configure_ie,NAME,AP,interface,%s,IE_Name,RSNE,Contents,30180100000fac040200ffffffff000fac040100000fac020c00" % iface)
  504. sigma_dut_cmd_check("ap_config_commit,NAME,AP")
  505. dev[0].connect("test-psk", psk="12345678", scan_freq="2412")
  506. sigma_dut_cmd_check("ap_reset_default")
  507. finally:
  508. stop_sigma_dut(sigma)
  509. def test_sigma_dut_ap_sae(dev, apdev, params):
  510. """sigma_dut controlled AP with SAE"""
  511. logdir = os.path.join(params['logdir'],
  512. "sigma_dut_ap_sae.sigma-hostapd")
  513. if "SAE" not in dev[0].get_capability("auth_alg"):
  514. raise HwsimSkip("SAE not supported")
  515. with HWSimRadio() as (radio, iface):
  516. sigma = start_sigma_dut(iface, hostapd_logdir=logdir)
  517. try:
  518. sigma_dut_cmd_check("ap_reset_default")
  519. sigma_dut_cmd_check("ap_set_wireless,NAME,AP,CHANNEL,1,SSID,test-sae,MODE,11ng")
  520. sigma_dut_cmd_check("ap_set_security,NAME,AP,KEYMGNT,WPA2-SAE,PSK,12345678")
  521. sigma_dut_cmd_check("ap_config_commit,NAME,AP")
  522. dev[0].request("SET sae_groups ")
  523. dev[0].connect("test-sae", key_mgmt="SAE", psk="12345678",
  524. ieee80211w="2", scan_freq="2412")
  525. if dev[0].get_status_field('sae_group') != '19':
  526. raise Exception("Expected default SAE group not used")
  527. sigma_dut_cmd_check("ap_reset_default")
  528. finally:
  529. stop_sigma_dut(sigma)
  530. def test_sigma_dut_ap_sae_password(dev, apdev, params):
  531. """sigma_dut controlled AP with SAE and long password"""
  532. logdir = os.path.join(params['logdir'],
  533. "sigma_dut_ap_sae_password.sigma-hostapd")
  534. if "SAE" not in dev[0].get_capability("auth_alg"):
  535. raise HwsimSkip("SAE not supported")
  536. with HWSimRadio() as (radio, iface):
  537. sigma = start_sigma_dut(iface, hostapd_logdir=logdir)
  538. try:
  539. sigma_dut_cmd_check("ap_reset_default")
  540. sigma_dut_cmd_check("ap_set_wireless,NAME,AP,CHANNEL,1,SSID,test-sae,MODE,11ng")
  541. sigma_dut_cmd_check("ap_set_security,NAME,AP,KEYMGNT,WPA2-SAE,PSK," + 100*'C')
  542. sigma_dut_cmd_check("ap_config_commit,NAME,AP")
  543. dev[0].request("SET sae_groups ")
  544. dev[0].connect("test-sae", key_mgmt="SAE", sae_password=100*'C',
  545. ieee80211w="2", scan_freq="2412")
  546. if dev[0].get_status_field('sae_group') != '19':
  547. raise Exception("Expected default SAE group not used")
  548. sigma_dut_cmd_check("ap_reset_default")
  549. finally:
  550. stop_sigma_dut(sigma)
  551. def test_sigma_dut_ap_sae_group(dev, apdev, params):
  552. """sigma_dut controlled AP with SAE and specific group"""
  553. logdir = os.path.join(params['logdir'],
  554. "sigma_dut_ap_sae_group.sigma-hostapd")
  555. if "SAE" not in dev[0].get_capability("auth_alg"):
  556. raise HwsimSkip("SAE not supported")
  557. with HWSimRadio() as (radio, iface):
  558. sigma = start_sigma_dut(iface, hostapd_logdir=logdir)
  559. try:
  560. sigma_dut_cmd_check("ap_reset_default")
  561. sigma_dut_cmd_check("ap_set_wireless,NAME,AP,CHANNEL,1,SSID,test-sae,MODE,11ng")
  562. sigma_dut_cmd_check("ap_set_security,NAME,AP,KEYMGNT,WPA2-SAE,PSK,12345678,ECGroupID,20")
  563. sigma_dut_cmd_check("ap_config_commit,NAME,AP")
  564. dev[0].request("SET sae_groups ")
  565. dev[0].connect("test-sae", key_mgmt="SAE", psk="12345678",
  566. ieee80211w="2", scan_freq="2412")
  567. if dev[0].get_status_field('sae_group') != '20':
  568. raise Exception("Expected SAE group not used")
  569. sigma_dut_cmd_check("ap_reset_default")
  570. finally:
  571. stop_sigma_dut(sigma)
  572. def test_sigma_dut_ap_psk_sae(dev, apdev, params):
  573. """sigma_dut controlled AP with PSK+SAE"""
  574. if "SAE" not in dev[0].get_capability("auth_alg"):
  575. raise HwsimSkip("SAE not supported")
  576. logdir = os.path.join(params['logdir'],
  577. "sigma_dut_ap_psk_sae.sigma-hostapd")
  578. with HWSimRadio() as (radio, iface):
  579. sigma = start_sigma_dut(iface, hostapd_logdir=logdir)
  580. try:
  581. sigma_dut_cmd_check("ap_reset_default")
  582. sigma_dut_cmd_check("ap_set_wireless,NAME,AP,CHANNEL,1,SSID,test-sae,MODE,11ng")
  583. sigma_dut_cmd_check("ap_set_security,NAME,AP,KEYMGNT,WPA2-PSK-SAE,PSK,12345678")
  584. sigma_dut_cmd_check("ap_config_commit,NAME,AP")
  585. dev[2].request("SET sae_groups ")
  586. dev[2].connect("test-sae", key_mgmt="SAE", psk="12345678",
  587. scan_freq="2412", ieee80211w="0", wait_connect=False)
  588. dev[0].request("SET sae_groups ")
  589. dev[0].connect("test-sae", key_mgmt="SAE", psk="12345678",
  590. scan_freq="2412", ieee80211w="2")
  591. dev[1].connect("test-sae", psk="12345678", scan_freq="2412")
  592. ev = dev[2].wait_event(["CTRL-EVENT-CONNECTED"], timeout=0.1)
  593. dev[2].request("DISCONNECT")
  594. if ev is not None:
  595. raise Exception("Unexpected connection without PMF")
  596. sigma_dut_cmd_check("ap_reset_default")
  597. finally:
  598. stop_sigma_dut(sigma)
  599. def test_sigma_dut_owe(dev, apdev):
  600. """sigma_dut controlled OWE station"""
  601. try:
  602. run_sigma_dut_owe(dev, apdev)
  603. finally:
  604. dev[0].set("ignore_old_scan_res", "0")
  605. def run_sigma_dut_owe(dev, apdev):
  606. if "OWE" not in dev[0].get_capability("key_mgmt"):
  607. raise HwsimSkip("OWE not supported")
  608. ifname = dev[0].ifname
  609. sigma = start_sigma_dut(ifname)
  610. try:
  611. params = { "ssid": "owe",
  612. "wpa": "2",
  613. "wpa_key_mgmt": "OWE",
  614. "ieee80211w": "2",
  615. "rsn_pairwise": "CCMP" }
  616. hapd = hostapd.add_ap(apdev[0], params)
  617. bssid = hapd.own_addr()
  618. sigma_dut_cmd_check("sta_reset_default,interface,%s,prog,WPA3" % ifname)
  619. sigma_dut_cmd_check("sta_set_ip_config,interface,%s,dhcp,0,ip,127.0.0.11,mask,255.255.255.0" % ifname)
  620. sigma_dut_cmd_check("sta_set_security,interface,%s,ssid,owe,Type,OWE" % ifname)
  621. sigma_dut_cmd_check("sta_associate,interface,%s,ssid,owe,channel,1" % ifname)
  622. sigma_dut_wait_connected(ifname)
  623. sigma_dut_cmd_check("sta_get_ip_config,interface," + ifname)
  624. dev[0].dump_monitor()
  625. sigma_dut_cmd("sta_reassoc,interface,%s,Channel,1,bssid,%s" % (ifname, bssid))
  626. dev[0].wait_connected()
  627. sigma_dut_cmd_check("sta_disconnect,interface," + ifname)
  628. dev[0].wait_disconnected()
  629. dev[0].dump_monitor()
  630. sigma_dut_cmd_check("sta_reset_default,interface,%s,prog,WPA3" % ifname)
  631. sigma_dut_cmd_check("sta_set_ip_config,interface,%s,dhcp,0,ip,127.0.0.11,mask,255.255.255.0" % ifname)
  632. sigma_dut_cmd_check("sta_set_security,interface,%s,ssid,owe,Type,OWE,ECGroupID,20" % ifname)
  633. sigma_dut_cmd_check("sta_associate,interface,%s,ssid,owe,channel,1" % ifname)
  634. sigma_dut_wait_connected(ifname)
  635. sigma_dut_cmd_check("sta_get_ip_config,interface," + ifname)
  636. sigma_dut_cmd_check("sta_disconnect,interface," + ifname)
  637. dev[0].wait_disconnected()
  638. dev[0].dump_monitor()
  639. sigma_dut_cmd_check("sta_reset_default,interface,%s,prog,WPA3" % ifname)
  640. sigma_dut_cmd_check("sta_set_ip_config,interface,%s,dhcp,0,ip,127.0.0.11,mask,255.255.255.0" % ifname)
  641. sigma_dut_cmd_check("sta_set_security,interface,%s,ssid,owe,Type,OWE,ECGroupID,0" % ifname)
  642. sigma_dut_cmd_check("sta_associate,interface,%s,ssid,owe,channel,1" % ifname)
  643. ev = dev[0].wait_event(["CTRL-EVENT-ASSOC-REJECT"], timeout=10)
  644. sigma_dut_cmd_check("sta_disconnect,interface," + ifname)
  645. if ev is None:
  646. raise Exception("Association not rejected")
  647. if "status_code=77" not in ev:
  648. raise Exception("Unexpected rejection reason: " + ev)
  649. sigma_dut_cmd_check("sta_reset_default,interface," + ifname)
  650. finally:
  651. stop_sigma_dut(sigma)
  652. def test_sigma_dut_ap_owe(dev, apdev, params):
  653. """sigma_dut controlled AP with OWE"""
  654. logdir = os.path.join(params['logdir'],
  655. "sigma_dut_ap_owe.sigma-hostapd")
  656. if "OWE" not in dev[0].get_capability("key_mgmt"):
  657. raise HwsimSkip("OWE not supported")
  658. with HWSimRadio() as (radio, iface):
  659. sigma = start_sigma_dut(iface, hostapd_logdir=logdir)
  660. try:
  661. sigma_dut_cmd_check("ap_reset_default,NAME,AP,Program,WPA3")
  662. sigma_dut_cmd_check("ap_set_wireless,NAME,AP,CHANNEL,1,SSID,owe,MODE,11ng")
  663. sigma_dut_cmd_check("ap_set_security,NAME,AP,KEYMGNT,OWE")
  664. sigma_dut_cmd_check("ap_config_commit,NAME,AP")
  665. dev[0].connect("owe", key_mgmt="OWE", ieee80211w="2",
  666. scan_freq="2412")
  667. sigma_dut_cmd_check("ap_reset_default")
  668. finally:
  669. stop_sigma_dut(sigma)
  670. def test_sigma_dut_ap_owe_ecgroupid(dev, apdev):
  671. """sigma_dut controlled AP with OWE and ECGroupID"""
  672. if "OWE" not in dev[0].get_capability("key_mgmt"):
  673. raise HwsimSkip("OWE not supported")
  674. with HWSimRadio() as (radio, iface):
  675. sigma = start_sigma_dut(iface)
  676. try:
  677. sigma_dut_cmd_check("ap_reset_default,NAME,AP,Program,WPA3")
  678. sigma_dut_cmd_check("ap_set_wireless,NAME,AP,CHANNEL,1,SSID,owe,MODE,11ng")
  679. sigma_dut_cmd_check("ap_set_security,NAME,AP,KEYMGNT,OWE,ECGroupID,20 21,PMF,Required")
  680. sigma_dut_cmd_check("ap_config_commit,NAME,AP")
  681. dev[0].connect("owe", key_mgmt="OWE", ieee80211w="2",
  682. owe_group="20", scan_freq="2412")
  683. dev[0].request("REMOVE_NETWORK all")
  684. dev[0].wait_disconnected()
  685. dev[0].connect("owe", key_mgmt="OWE", ieee80211w="2",
  686. owe_group="21", scan_freq="2412")
  687. dev[0].request("REMOVE_NETWORK all")
  688. dev[0].wait_disconnected()
  689. dev[0].connect("owe", key_mgmt="OWE", ieee80211w="2",
  690. owe_group="19", scan_freq="2412", wait_connect=False)
  691. ev = dev[0].wait_event(["CTRL-EVENT-ASSOC-REJECT"], timeout=10)
  692. dev[0].request("DISCONNECT")
  693. if ev is None:
  694. raise Exception("Association not rejected")
  695. if "status_code=77" not in ev:
  696. raise Exception("Unexpected rejection reason: " + ev)
  697. dev[0].dump_monitor()
  698. sigma_dut_cmd_check("ap_reset_default")
  699. finally:
  700. stop_sigma_dut(sigma)
  701. def test_sigma_dut_ap_owe_transition_mode(dev, apdev, params):
  702. """sigma_dut controlled AP with OWE and transition mode"""
  703. if "OWE" not in dev[0].get_capability("key_mgmt"):
  704. raise HwsimSkip("OWE not supported")
  705. logdir = os.path.join(params['logdir'],
  706. "sigma_dut_ap_owe_transition_mode.sigma-hostapd")
  707. with HWSimRadio() as (radio, iface):
  708. sigma = start_sigma_dut(iface, hostapd_logdir=logdir)
  709. try:
  710. sigma_dut_cmd_check("ap_reset_default,NAME,AP,Program,WPA3")
  711. sigma_dut_cmd_check("ap_set_wireless,NAME,AP,WLAN_TAG,1,CHANNEL,1,SSID,owe,MODE,11ng")
  712. sigma_dut_cmd_check("ap_set_security,NAME,AP,WLAN_TAG,1,KEYMGNT,OWE")
  713. sigma_dut_cmd_check("ap_set_wireless,NAME,AP,WLAN_TAG,2,CHANNEL,1,SSID,owe,MODE,11ng")
  714. sigma_dut_cmd_check("ap_set_security,NAME,AP,WLAN_TAG,2,KEYMGNT,NONE")
  715. sigma_dut_cmd_check("ap_config_commit,NAME,AP")
  716. res1 = sigma_dut_cmd_check("ap_get_mac_address,NAME,AP,WLAN_TAG,1,Interface,24G")
  717. res2 = sigma_dut_cmd_check("ap_get_mac_address,NAME,AP,WLAN_TAG,2,Interface,24G")
  718. dev[0].connect("owe", key_mgmt="OWE", ieee80211w="2",
  719. scan_freq="2412")
  720. dev[1].connect("owe", key_mgmt="NONE", scan_freq="2412")
  721. if dev[0].get_status_field('bssid') not in res1:
  722. raise Exception("Unexpected ap_get_mac_address WLAN_TAG,1: " + res1)
  723. if dev[1].get_status_field('bssid') not in res2:
  724. raise Exception("Unexpected ap_get_mac_address WLAN_TAG,2: " + res2)
  725. sigma_dut_cmd_check("ap_reset_default")
  726. finally:
  727. stop_sigma_dut(sigma)
  728. def test_sigma_dut_ap_owe_transition_mode_2(dev, apdev, params):
  729. """sigma_dut controlled AP with OWE and transition mode (2)"""
  730. if "OWE" not in dev[0].get_capability("key_mgmt"):
  731. raise HwsimSkip("OWE not supported")
  732. logdir = os.path.join(params['logdir'],
  733. "sigma_dut_ap_owe_transition_mode_2.sigma-hostapd")
  734. with HWSimRadio() as (radio, iface):
  735. sigma = start_sigma_dut(iface, hostapd_logdir=logdir)
  736. try:
  737. sigma_dut_cmd_check("ap_reset_default,NAME,AP,Program,WPA3")
  738. sigma_dut_cmd_check("ap_set_wireless,NAME,AP,WLAN_TAG,1,CHANNEL,1,SSID,owe,MODE,11ng")
  739. sigma_dut_cmd_check("ap_set_security,NAME,AP,WLAN_TAG,1,KEYMGNT,NONE")
  740. sigma_dut_cmd_check("ap_set_wireless,NAME,AP,WLAN_TAG,2,CHANNEL,1,MODE,11ng")
  741. sigma_dut_cmd_check("ap_set_security,NAME,AP,WLAN_TAG,2,KEYMGNT,OWE")
  742. sigma_dut_cmd_check("ap_config_commit,NAME,AP")
  743. res1 = sigma_dut_cmd_check("ap_get_mac_address,NAME,AP,WLAN_TAG,1,Interface,24G")
  744. res2 = sigma_dut_cmd_check("ap_get_mac_address,NAME,AP,WLAN_TAG,2,Interface,24G")
  745. dev[0].connect("owe", key_mgmt="OWE", ieee80211w="2",
  746. scan_freq="2412")
  747. dev[1].connect("owe", key_mgmt="NONE", scan_freq="2412")
  748. if dev[0].get_status_field('bssid') not in res2:
  749. raise Exception("Unexpected ap_get_mac_address WLAN_TAG,2: " + res1)
  750. if dev[1].get_status_field('bssid') not in res1:
  751. raise Exception("Unexpected ap_get_mac_address WLAN_TAG,1: " + res2)
  752. sigma_dut_cmd_check("ap_reset_default")
  753. finally:
  754. stop_sigma_dut(sigma)
  755. def dpp_init_enrollee(dev, id1):
  756. logger.info("Starting DPP initiator/enrollee in a thread")
  757. time.sleep(1)
  758. cmd = "DPP_AUTH_INIT peer=%d role=enrollee" % id1
  759. if "OK" not in dev.request(cmd):
  760. raise Exception("Failed to initiate DPP Authentication")
  761. ev = dev.wait_event(["DPP-CONF-RECEIVED"], timeout=5)
  762. if ev is None:
  763. raise Exception("DPP configuration not completed (Enrollee)")
  764. logger.info("DPP initiator/enrollee done")
  765. def test_sigma_dut_dpp_qr_resp_1(dev, apdev):
  766. """sigma_dut DPP/QR responder (conf index 1)"""
  767. run_sigma_dut_dpp_qr_resp(dev, apdev, 1)
  768. def test_sigma_dut_dpp_qr_resp_2(dev, apdev):
  769. """sigma_dut DPP/QR responder (conf index 2)"""
  770. run_sigma_dut_dpp_qr_resp(dev, apdev, 2)
  771. def test_sigma_dut_dpp_qr_resp_3(dev, apdev):
  772. """sigma_dut DPP/QR responder (conf index 3)"""
  773. run_sigma_dut_dpp_qr_resp(dev, apdev, 3)
  774. def test_sigma_dut_dpp_qr_resp_4(dev, apdev):
  775. """sigma_dut DPP/QR responder (conf index 4)"""
  776. run_sigma_dut_dpp_qr_resp(dev, apdev, 4)
  777. def test_sigma_dut_dpp_qr_resp_5(dev, apdev):
  778. """sigma_dut DPP/QR responder (conf index 5)"""
  779. run_sigma_dut_dpp_qr_resp(dev, apdev, 5)
  780. def test_sigma_dut_dpp_qr_resp_6(dev, apdev):
  781. """sigma_dut DPP/QR responder (conf index 6)"""
  782. run_sigma_dut_dpp_qr_resp(dev, apdev, 6)
  783. def test_sigma_dut_dpp_qr_resp_7(dev, apdev):
  784. """sigma_dut DPP/QR responder (conf index 7)"""
  785. run_sigma_dut_dpp_qr_resp(dev, apdev, 7)
  786. def test_sigma_dut_dpp_qr_resp_chan_list(dev, apdev):
  787. """sigma_dut DPP/QR responder (channel list override)"""
  788. run_sigma_dut_dpp_qr_resp(dev, apdev, 1, chan_list='81/2 81/6 81/1',
  789. listen_chan=2)
  790. def run_sigma_dut_dpp_qr_resp(dev, apdev, conf_idx, chan_list=None,
  791. listen_chan=None):
  792. check_dpp_capab(dev[0])
  793. check_dpp_capab(dev[1])
  794. sigma = start_sigma_dut(dev[0].ifname)
  795. try:
  796. cmd = "dev_exec_action,program,DPP,DPPActionType,GetLocalBootstrap,DPPCryptoIdentifier,P-256,DPPBS,QR"
  797. if chan_list:
  798. cmd += ",DPPChannelList," + chan_list
  799. res = sigma_dut_cmd(cmd)
  800. if "status,COMPLETE" not in res:
  801. raise Exception("dev_exec_action did not succeed: " + res)
  802. hex = res.split(',')[3]
  803. uri = hex.decode('hex')
  804. logger.info("URI from sigma_dut: " + uri)
  805. res = dev[1].request("DPP_QR_CODE " + uri)
  806. if "FAIL" in res:
  807. raise Exception("Failed to parse QR Code URI")
  808. id1 = int(res)
  809. t = threading.Thread(target=dpp_init_enrollee, args=(dev[1], id1))
  810. t.start()
  811. cmd = "dev_exec_action,program,DPP,DPPActionType,AutomaticDPP,DPPAuthRole,Responder,DPPConfIndex,%d,DPPAuthDirection,Single,DPPProvisioningRole,Configurator,DPPConfEnrolleeRole,STA,DPPSigningKeyECC,P-256,DPPBS,QR,DPPTimeout,6" % conf_idx
  812. if listen_chan:
  813. cmd += ",DPPListenChannel," + str(listen_chan)
  814. res = sigma_dut_cmd(cmd, timeout=10)
  815. t.join()
  816. if "BootstrapResult,OK,AuthResult,OK,ConfResult,OK" not in res:
  817. raise Exception("Unexpected result: " + res)
  818. finally:
  819. stop_sigma_dut(sigma)
  820. def test_sigma_dut_dpp_qr_init_enrollee(dev, apdev):
  821. """sigma_dut DPP/QR initiator as Enrollee"""
  822. check_dpp_capab(dev[0])
  823. check_dpp_capab(dev[1])
  824. csign = "30770201010420768240a3fc89d6662d9782f120527fe7fb9edc6366ab0b9c7dde96125cfd250fa00a06082a8648ce3d030107a144034200042908e1baf7bf413cc66f9e878a03e8bb1835ba94b033dbe3d6969fc8575d5eb5dfda1cb81c95cee21d0cd7d92ba30541ffa05cb6296f5dd808b0c1c2a83c0708"
  825. csign_pub = "3059301306072a8648ce3d020106082a8648ce3d030107034200042908e1baf7bf413cc66f9e878a03e8bb1835ba94b033dbe3d6969fc8575d5eb5dfda1cb81c95cee21d0cd7d92ba30541ffa05cb6296f5dd808b0c1c2a83c0708"
  826. ap_connector = "eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJwYWtZbXVzd1dCdWpSYTl5OEsweDViaTVrT3VNT3dzZHRlaml2UG55ZHZzIiwiYWxnIjoiRVMyNTYifQ.eyJncm91cHMiOlt7Imdyb3VwSWQiOiIqIiwibmV0Um9sZSI6ImFwIn1dLCJuZXRBY2Nlc3NLZXkiOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiIybU5vNXZuRkI5bEw3d1VWb1hJbGVPYzBNSEE1QXZKbnpwZXZULVVTYzVNIiwieSI6IlhzS3dqVHJlLTg5WWdpU3pKaG9CN1haeUttTU05OTl3V2ZaSVl0bi01Q3MifX0.XhjFpZgcSa7G2lHy0OCYTvaZFRo5Hyx6b7g7oYyusLC7C_73AJ4_BxEZQVYJXAtDuGvb3dXSkHEKxREP9Q6Qeg"
  827. ap_netaccesskey = "30770201010420ceba752db2ad5200fa7bc565b9c05c69b7eb006751b0b329b0279de1c19ca67ca00a06082a8648ce3d030107a14403420004da6368e6f9c507d94bef0515a1722578e73430703902f267ce97af4fe51273935ec2b08d3adefbcf588224b3261a01ed76722a630cf7df7059f64862d9fee42b"
  828. params = { "ssid": "DPPNET01",
  829. "wpa": "2",
  830. "wpa_key_mgmt": "DPP",
  831. "rsn_pairwise": "CCMP",
  832. "dpp_connector": ap_connector,
  833. "dpp_csign": csign_pub,
  834. "dpp_netaccesskey": ap_netaccesskey }
  835. try:
  836. hapd = hostapd.add_ap(apdev[0], params)
  837. except:
  838. raise HwsimSkip("DPP not supported")
  839. sigma = start_sigma_dut(dev[0].ifname)
  840. try:
  841. dev[0].set("dpp_config_processing", "2")
  842. cmd = "DPP_CONFIGURATOR_ADD key=" + csign
  843. res = dev[1].request(cmd);
  844. if "FAIL" in res:
  845. raise Exception("Failed to add configurator")
  846. conf_id = int(res)
  847. addr = dev[1].own_addr().replace(':', '')
  848. cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/6 mac=" + addr
  849. res = dev[1].request(cmd)
  850. if "FAIL" in res:
  851. raise Exception("Failed to generate bootstrapping info")
  852. id0 = int(res)
  853. uri0 = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
  854. dev[1].set("dpp_configurator_params",
  855. " conf=sta-dpp ssid=%s configurator=%d" % ("DPPNET01".encode("hex"), conf_id));
  856. cmd = "DPP_LISTEN 2437 role=configurator"
  857. if "OK" not in dev[1].request(cmd):
  858. raise Exception("Failed to start listen operation")
  859. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,SetPeerBootstrap,DPPBootstrappingdata,%s,DPPBS,QR" % uri0.encode('hex'))
  860. if "status,COMPLETE" not in res:
  861. raise Exception("dev_exec_action did not succeed: " + res)
  862. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,AutomaticDPP,DPPAuthRole,Initiator,DPPAuthDirection,Single,DPPProvisioningRole,Enrollee,DPPBS,QR,DPPTimeout,6,DPPWaitForConnect,Yes", timeout=10)
  863. if "BootstrapResult,OK,AuthResult,OK,ConfResult,OK,NetworkIntroResult,OK,NetworkConnectResult,OK" not in res:
  864. raise Exception("Unexpected result: " + res)
  865. finally:
  866. dev[0].set("dpp_config_processing", "0")
  867. stop_sigma_dut(sigma)
  868. def test_sigma_dut_dpp_qr_mutual_init_enrollee(dev, apdev):
  869. """sigma_dut DPP/QR (mutual) initiator as Enrollee"""
  870. run_sigma_dut_dpp_qr_mutual_init_enrollee_check(dev, apdev)
  871. def test_sigma_dut_dpp_qr_mutual_init_enrollee_check(dev, apdev):
  872. """sigma_dut DPP/QR (mutual) initiator as Enrollee (extra check)"""
  873. run_sigma_dut_dpp_qr_mutual_init_enrollee_check(dev, apdev,
  874. extra="DPPAuthDirection,Mutual,")
  875. def run_sigma_dut_dpp_qr_mutual_init_enrollee_check(dev, apdev, extra=''):
  876. check_dpp_capab(dev[0])
  877. check_dpp_capab(dev[1])
  878. csign = "30770201010420768240a3fc89d6662d9782f120527fe7fb9edc6366ab0b9c7dde96125cfd250fa00a06082a8648ce3d030107a144034200042908e1baf7bf413cc66f9e878a03e8bb1835ba94b033dbe3d6969fc8575d5eb5dfda1cb81c95cee21d0cd7d92ba30541ffa05cb6296f5dd808b0c1c2a83c0708"
  879. csign_pub = "3059301306072a8648ce3d020106082a8648ce3d030107034200042908e1baf7bf413cc66f9e878a03e8bb1835ba94b033dbe3d6969fc8575d5eb5dfda1cb81c95cee21d0cd7d92ba30541ffa05cb6296f5dd808b0c1c2a83c0708"
  880. ap_connector = "eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJwYWtZbXVzd1dCdWpSYTl5OEsweDViaTVrT3VNT3dzZHRlaml2UG55ZHZzIiwiYWxnIjoiRVMyNTYifQ.eyJncm91cHMiOlt7Imdyb3VwSWQiOiIqIiwibmV0Um9sZSI6ImFwIn1dLCJuZXRBY2Nlc3NLZXkiOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiIybU5vNXZuRkI5bEw3d1VWb1hJbGVPYzBNSEE1QXZKbnpwZXZULVVTYzVNIiwieSI6IlhzS3dqVHJlLTg5WWdpU3pKaG9CN1haeUttTU05OTl3V2ZaSVl0bi01Q3MifX0.XhjFpZgcSa7G2lHy0OCYTvaZFRo5Hyx6b7g7oYyusLC7C_73AJ4_BxEZQVYJXAtDuGvb3dXSkHEKxREP9Q6Qeg"
  881. ap_netaccesskey = "30770201010420ceba752db2ad5200fa7bc565b9c05c69b7eb006751b0b329b0279de1c19ca67ca00a06082a8648ce3d030107a14403420004da6368e6f9c507d94bef0515a1722578e73430703902f267ce97af4fe51273935ec2b08d3adefbcf588224b3261a01ed76722a630cf7df7059f64862d9fee42b"
  882. params = { "ssid": "DPPNET01",
  883. "wpa": "2",
  884. "wpa_key_mgmt": "DPP",
  885. "rsn_pairwise": "CCMP",
  886. "dpp_connector": ap_connector,
  887. "dpp_csign": csign_pub,
  888. "dpp_netaccesskey": ap_netaccesskey }
  889. try:
  890. hapd = hostapd.add_ap(apdev[0], params)
  891. except:
  892. raise HwsimSkip("DPP not supported")
  893. sigma = start_sigma_dut(dev[0].ifname)
  894. try:
  895. dev[0].set("dpp_config_processing", "2")
  896. cmd = "DPP_CONFIGURATOR_ADD key=" + csign
  897. res = dev[1].request(cmd);
  898. if "FAIL" in res:
  899. raise Exception("Failed to add configurator")
  900. conf_id = int(res)
  901. addr = dev[1].own_addr().replace(':', '')
  902. cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/6 mac=" + addr
  903. res = dev[1].request(cmd)
  904. if "FAIL" in res:
  905. raise Exception("Failed to generate bootstrapping info")
  906. id0 = int(res)
  907. uri0 = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
  908. dev[1].set("dpp_configurator_params",
  909. " conf=sta-dpp ssid=%s configurator=%d" % ("DPPNET01".encode("hex"), conf_id));
  910. cmd = "DPP_LISTEN 2437 role=configurator qr=mutual"
  911. if "OK" not in dev[1].request(cmd):
  912. raise Exception("Failed to start listen operation")
  913. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,GetLocalBootstrap,DPPCryptoIdentifier,P-256,DPPBS,QR")
  914. if "status,COMPLETE" not in res:
  915. raise Exception("dev_exec_action did not succeed: " + res)
  916. hex = res.split(',')[3]
  917. uri = hex.decode('hex')
  918. logger.info("URI from sigma_dut: " + uri)
  919. res = dev[1].request("DPP_QR_CODE " + uri)
  920. if "FAIL" in res:
  921. raise Exception("Failed to parse QR Code URI")
  922. id1 = int(res)
  923. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,SetPeerBootstrap,DPPBootstrappingdata,%s,DPPBS,QR" % uri0.encode('hex'))
  924. if "status,COMPLETE" not in res:
  925. raise Exception("dev_exec_action did not succeed: " + res)
  926. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,AutomaticDPP,DPPAuthRole,Initiator,%sDPPProvisioningRole,Enrollee,DPPBS,QR,DPPTimeout,6,DPPWaitForConnect,Yes" % extra, timeout=10)
  927. if "BootstrapResult,OK,AuthResult,OK,ConfResult,OK,NetworkIntroResult,OK,NetworkConnectResult,OK" not in res:
  928. raise Exception("Unexpected result: " + res)
  929. finally:
  930. dev[0].set("dpp_config_processing", "0")
  931. stop_sigma_dut(sigma)
  932. def dpp_init_conf_mutual(dev, id1, conf_id, own_id=None):
  933. time.sleep(1)
  934. logger.info("Starting DPP initiator/configurator in a thread")
  935. cmd = "DPP_AUTH_INIT peer=%d conf=sta-dpp ssid=%s configurator=%d" % (id1, "DPPNET01".encode("hex"), conf_id)
  936. if own_id is not None:
  937. cmd += " own=%d" % own_id
  938. if "OK" not in dev.request(cmd):
  939. raise Exception("Failed to initiate DPP Authentication")
  940. ev = dev.wait_event(["DPP-CONF-SENT"], timeout=10)
  941. if ev is None:
  942. raise Exception("DPP configuration not completed (Configurator)")
  943. logger.info("DPP initiator/configurator done")
  944. def test_sigma_dut_dpp_qr_mutual_resp_enrollee(dev, apdev):
  945. """sigma_dut DPP/QR (mutual) responder as Enrollee"""
  946. run_sigma_dut_dpp_qr_mutual_resp_enrollee(dev, apdev)
  947. def test_sigma_dut_dpp_qr_mutual_resp_enrollee_pending(dev, apdev):
  948. """sigma_dut DPP/QR (mutual) responder as Enrollee (response pending)"""
  949. run_sigma_dut_dpp_qr_mutual_resp_enrollee(dev, apdev, ',DPPDelayQRResponse,1')
  950. def run_sigma_dut_dpp_qr_mutual_resp_enrollee(dev, apdev, extra=None):
  951. check_dpp_capab(dev[0])
  952. check_dpp_capab(dev[1])
  953. csign = "30770201010420768240a3fc89d6662d9782f120527fe7fb9edc6366ab0b9c7dde96125cfd250fa00a06082a8648ce3d030107a144034200042908e1baf7bf413cc66f9e878a03e8bb1835ba94b033dbe3d6969fc8575d5eb5dfda1cb81c95cee21d0cd7d92ba30541ffa05cb6296f5dd808b0c1c2a83c0708"
  954. csign_pub = "3059301306072a8648ce3d020106082a8648ce3d030107034200042908e1baf7bf413cc66f9e878a03e8bb1835ba94b033dbe3d6969fc8575d5eb5dfda1cb81c95cee21d0cd7d92ba30541ffa05cb6296f5dd808b0c1c2a83c0708"
  955. ap_connector = "eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJwYWtZbXVzd1dCdWpSYTl5OEsweDViaTVrT3VNT3dzZHRlaml2UG55ZHZzIiwiYWxnIjoiRVMyNTYifQ.eyJncm91cHMiOlt7Imdyb3VwSWQiOiIqIiwibmV0Um9sZSI6ImFwIn1dLCJuZXRBY2Nlc3NLZXkiOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiIybU5vNXZuRkI5bEw3d1VWb1hJbGVPYzBNSEE1QXZKbnpwZXZULVVTYzVNIiwieSI6IlhzS3dqVHJlLTg5WWdpU3pKaG9CN1haeUttTU05OTl3V2ZaSVl0bi01Q3MifX0.XhjFpZgcSa7G2lHy0OCYTvaZFRo5Hyx6b7g7oYyusLC7C_73AJ4_BxEZQVYJXAtDuGvb3dXSkHEKxREP9Q6Qeg"
  956. ap_netaccesskey = "30770201010420ceba752db2ad5200fa7bc565b9c05c69b7eb006751b0b329b0279de1c19ca67ca00a06082a8648ce3d030107a14403420004da6368e6f9c507d94bef0515a1722578e73430703902f267ce97af4fe51273935ec2b08d3adefbcf588224b3261a01ed76722a630cf7df7059f64862d9fee42b"
  957. params = { "ssid": "DPPNET01",
  958. "wpa": "2",
  959. "wpa_key_mgmt": "DPP",
  960. "rsn_pairwise": "CCMP",
  961. "dpp_connector": ap_connector,
  962. "dpp_csign": csign_pub,
  963. "dpp_netaccesskey": ap_netaccesskey }
  964. try:
  965. hapd = hostapd.add_ap(apdev[0], params)
  966. except:
  967. raise HwsimSkip("DPP not supported")
  968. sigma = start_sigma_dut(dev[0].ifname)
  969. try:
  970. dev[0].set("dpp_config_processing", "2")
  971. cmd = "DPP_CONFIGURATOR_ADD key=" + csign
  972. res = dev[1].request(cmd);
  973. if "FAIL" in res:
  974. raise Exception("Failed to add configurator")
  975. conf_id = int(res)
  976. addr = dev[1].own_addr().replace(':', '')
  977. cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/6 mac=" + addr
  978. res = dev[1].request(cmd)
  979. if "FAIL" in res:
  980. raise Exception("Failed to generate bootstrapping info")
  981. id0 = int(res)
  982. uri0 = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
  983. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,GetLocalBootstrap,DPPCryptoIdentifier,P-256,DPPBS,QR")
  984. if "status,COMPLETE" not in res:
  985. raise Exception("dev_exec_action did not succeed: " + res)
  986. hex = res.split(',')[3]
  987. uri = hex.decode('hex')
  988. logger.info("URI from sigma_dut: " + uri)
  989. res = dev[1].request("DPP_QR_CODE " + uri)
  990. if "FAIL" in res:
  991. raise Exception("Failed to parse QR Code URI")
  992. id1 = int(res)
  993. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,SetPeerBootstrap,DPPBootstrappingdata,%s,DPPBS,QR" % uri0.encode('hex'))
  994. if "status,COMPLETE" not in res:
  995. raise Exception("dev_exec_action did not succeed: " + res)
  996. t = threading.Thread(target=dpp_init_conf_mutual,
  997. args=(dev[1], id1, conf_id, id0))
  998. t.start()
  999. cmd = "dev_exec_action,program,DPP,DPPActionType,AutomaticDPP,DPPAuthRole,Responder,DPPAuthDirection,Mutual,DPPProvisioningRole,Enrollee,DPPBS,QR,DPPTimeout,20,DPPWaitForConnect,Yes"
  1000. if extra:
  1001. cmd += extra
  1002. res = sigma_dut_cmd(cmd, timeout=25)
  1003. t.join()
  1004. if "BootstrapResult,OK,AuthResult,OK,ConfResult,OK,NetworkIntroResult,OK,NetworkConnectResult,OK" not in res:
  1005. raise Exception("Unexpected result: " + res)
  1006. finally:
  1007. dev[0].set("dpp_config_processing", "0")
  1008. stop_sigma_dut(sigma)
  1009. def dpp_resp_conf_mutual(dev, conf_id, uri):
  1010. logger.info("Starting DPP responder/configurator in a thread")
  1011. dev.set("dpp_configurator_params",
  1012. " conf=sta-dpp ssid=%s configurator=%d" % ("DPPNET01".encode("hex"), conf_id));
  1013. cmd = "DPP_LISTEN 2437 role=configurator qr=mutual"
  1014. if "OK" not in dev.request(cmd):
  1015. raise Exception("Failed to initiate DPP listen")
  1016. if uri:
  1017. ev = dev.wait_event(["DPP-SCAN-PEER-QR-CODE"], timeout=10)
  1018. if ev is None:
  1019. raise Exception("QR Code scan for mutual authentication not requested")
  1020. res = dev.request("DPP_QR_CODE " + uri)
  1021. if "FAIL" in res:
  1022. raise Exception("Failed to parse QR Code URI")
  1023. ev = dev.wait_event(["DPP-CONF-SENT"], timeout=10)
  1024. if ev is None:
  1025. raise Exception("DPP configuration not completed (Configurator)")
  1026. logger.info("DPP responder/configurator done")
  1027. def test_sigma_dut_dpp_qr_mutual_init_enrollee(dev, apdev):
  1028. """sigma_dut DPP/QR (mutual) initiator as Enrollee"""
  1029. run_sigma_dut_dpp_qr_mutual_init_enrollee(dev, apdev, False)
  1030. def test_sigma_dut_dpp_qr_mutual_init_enrollee_pending(dev, apdev):
  1031. """sigma_dut DPP/QR (mutual) initiator as Enrollee (response pending)"""
  1032. run_sigma_dut_dpp_qr_mutual_init_enrollee(dev, apdev, True)
  1033. def run_sigma_dut_dpp_qr_mutual_init_enrollee(dev, apdev, resp_pending):
  1034. check_dpp_capab(dev[0])
  1035. check_dpp_capab(dev[1])
  1036. csign = "30770201010420768240a3fc89d6662d9782f120527fe7fb9edc6366ab0b9c7dde96125cfd250fa00a06082a8648ce3d030107a144034200042908e1baf7bf413cc66f9e878a03e8bb1835ba94b033dbe3d6969fc8575d5eb5dfda1cb81c95cee21d0cd7d92ba30541ffa05cb6296f5dd808b0c1c2a83c0708"
  1037. csign_pub = "3059301306072a8648ce3d020106082a8648ce3d030107034200042908e1baf7bf413cc66f9e878a03e8bb1835ba94b033dbe3d6969fc8575d5eb5dfda1cb81c95cee21d0cd7d92ba30541ffa05cb6296f5dd808b0c1c2a83c0708"
  1038. ap_connector = "eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJwYWtZbXVzd1dCdWpSYTl5OEsweDViaTVrT3VNT3dzZHRlaml2UG55ZHZzIiwiYWxnIjoiRVMyNTYifQ.eyJncm91cHMiOlt7Imdyb3VwSWQiOiIqIiwibmV0Um9sZSI6ImFwIn1dLCJuZXRBY2Nlc3NLZXkiOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiIybU5vNXZuRkI5bEw3d1VWb1hJbGVPYzBNSEE1QXZKbnpwZXZULVVTYzVNIiwieSI6IlhzS3dqVHJlLTg5WWdpU3pKaG9CN1haeUttTU05OTl3V2ZaSVl0bi01Q3MifX0.XhjFpZgcSa7G2lHy0OCYTvaZFRo5Hyx6b7g7oYyusLC7C_73AJ4_BxEZQVYJXAtDuGvb3dXSkHEKxREP9Q6Qeg"
  1039. ap_netaccesskey = "30770201010420ceba752db2ad5200fa7bc565b9c05c69b7eb006751b0b329b0279de1c19ca67ca00a06082a8648ce3d030107a14403420004da6368e6f9c507d94bef0515a1722578e73430703902f267ce97af4fe51273935ec2b08d3adefbcf588224b3261a01ed76722a630cf7df7059f64862d9fee42b"
  1040. params = { "ssid": "DPPNET01",
  1041. "wpa": "2",
  1042. "wpa_key_mgmt": "DPP",
  1043. "rsn_pairwise": "CCMP",
  1044. "dpp_connector": ap_connector,
  1045. "dpp_csign": csign_pub,
  1046. "dpp_netaccesskey": ap_netaccesskey }
  1047. try:
  1048. hapd = hostapd.add_ap(apdev[0], params)
  1049. except:
  1050. raise HwsimSkip("DPP not supported")
  1051. sigma = start_sigma_dut(dev[0].ifname)
  1052. try:
  1053. dev[0].set("dpp_config_processing", "2")
  1054. cmd = "DPP_CONFIGURATOR_ADD key=" + csign
  1055. res = dev[1].request(cmd);
  1056. if "FAIL" in res:
  1057. raise Exception("Failed to add configurator")
  1058. conf_id = int(res)
  1059. addr = dev[1].own_addr().replace(':', '')
  1060. cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/6 mac=" + addr
  1061. res = dev[1].request(cmd)
  1062. if "FAIL" in res:
  1063. raise Exception("Failed to generate bootstrapping info")
  1064. id0 = int(res)
  1065. uri0 = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
  1066. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,GetLocalBootstrap,DPPCryptoIdentifier,P-256,DPPBS,QR")
  1067. if "status,COMPLETE" not in res:
  1068. raise Exception("dev_exec_action did not succeed: " + res)
  1069. hex = res.split(',')[3]
  1070. uri = hex.decode('hex')
  1071. logger.info("URI from sigma_dut: " + uri)
  1072. if not resp_pending:
  1073. res = dev[1].request("DPP_QR_CODE " + uri)
  1074. if "FAIL" in res:
  1075. raise Exception("Failed to parse QR Code URI")
  1076. uri = None
  1077. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,SetPeerBootstrap,DPPBootstrappingdata,%s,DPPBS,QR" % uri0.encode('hex'))
  1078. if "status,COMPLETE" not in res:
  1079. raise Exception("dev_exec_action did not succeed: " + res)
  1080. t = threading.Thread(target=dpp_resp_conf_mutual,
  1081. args=(dev[1], conf_id, uri))
  1082. t.start()
  1083. time.sleep(1)
  1084. cmd = "dev_exec_action,program,DPP,DPPActionType,AutomaticDPP,DPPAuthRole,Initiator,DPPProvisioningRole,Enrollee,DPPBS,QR,DPPTimeout,10,DPPWaitForConnect,Yes"
  1085. res = sigma_dut_cmd(cmd, timeout=15)
  1086. t.join()
  1087. if "BootstrapResult,OK,AuthResult,OK,ConfResult,OK,NetworkIntroResult,OK,NetworkConnectResult,OK" not in res:
  1088. raise Exception("Unexpected result: " + res)
  1089. finally:
  1090. dev[0].set("dpp_config_processing", "0")
  1091. stop_sigma_dut(sigma)
  1092. def test_sigma_dut_dpp_qr_init_enrollee_psk(dev, apdev):
  1093. """sigma_dut DPP/QR initiator as Enrollee (PSK)"""
  1094. check_dpp_capab(dev[0])
  1095. check_dpp_capab(dev[1])
  1096. params = hostapd.wpa2_params(ssid="DPPNET01",
  1097. passphrase="ThisIsDppPassphrase")
  1098. hapd = hostapd.add_ap(apdev[0], params)
  1099. sigma = start_sigma_dut(dev[0].ifname)
  1100. try:
  1101. dev[0].set("dpp_config_processing", "2")
  1102. cmd = "DPP_CONFIGURATOR_ADD"
  1103. res = dev[1].request(cmd);
  1104. if "FAIL" in res:
  1105. raise Exception("Failed to add configurator")
  1106. conf_id = int(res)
  1107. addr = dev[1].own_addr().replace(':', '')
  1108. cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/6 mac=" + addr
  1109. res = dev[1].request(cmd)
  1110. if "FAIL" in res:
  1111. raise Exception("Failed to generate bootstrapping info")
  1112. id0 = int(res)
  1113. uri0 = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
  1114. dev[1].set("dpp_configurator_params",
  1115. " conf=sta-psk ssid=%s pass=%s configurator=%d" % ("DPPNET01".encode("hex"), "ThisIsDppPassphrase".encode("hex"), conf_id));
  1116. cmd = "DPP_LISTEN 2437 role=configurator"
  1117. if "OK" not in dev[1].request(cmd):
  1118. raise Exception("Failed to start listen operation")
  1119. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,SetPeerBootstrap,DPPBootstrappingdata,%s,DPPBS,QR" % uri0.encode('hex'))
  1120. if "status,COMPLETE" not in res:
  1121. raise Exception("dev_exec_action did not succeed: " + res)
  1122. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,AutomaticDPP,DPPAuthRole,Initiator,DPPAuthDirection,Single,DPPProvisioningRole,Enrollee,DPPBS,QR,DPPTimeout,6,DPPWaitForConnect,Yes", timeout=10)
  1123. if "BootstrapResult,OK,AuthResult,OK,ConfResult,OK,NetworkConnectResult,OK" not in res:
  1124. raise Exception("Unexpected result: " + res)
  1125. finally:
  1126. dev[0].set("dpp_config_processing", "0")
  1127. stop_sigma_dut(sigma)
  1128. def test_sigma_dut_dpp_qr_init_configurator_1(dev, apdev):
  1129. """sigma_dut DPP/QR initiator as Configurator (conf index 1)"""
  1130. run_sigma_dut_dpp_qr_init_configurator(dev, apdev, 1)
  1131. def test_sigma_dut_dpp_qr_init_configurator_2(dev, apdev):
  1132. """sigma_dut DPP/QR initiator as Configurator (conf index 2)"""
  1133. run_sigma_dut_dpp_qr_init_configurator(dev, apdev, 2)
  1134. def test_sigma_dut_dpp_qr_init_configurator_3(dev, apdev):
  1135. """sigma_dut DPP/QR initiator as Configurator (conf index 3)"""
  1136. run_sigma_dut_dpp_qr_init_configurator(dev, apdev, 3)
  1137. def test_sigma_dut_dpp_qr_init_configurator_4(dev, apdev):
  1138. """sigma_dut DPP/QR initiator as Configurator (conf index 4)"""
  1139. run_sigma_dut_dpp_qr_init_configurator(dev, apdev, 4)
  1140. def test_sigma_dut_dpp_qr_init_configurator_5(dev, apdev):
  1141. """sigma_dut DPP/QR initiator as Configurator (conf index 5)"""
  1142. run_sigma_dut_dpp_qr_init_configurator(dev, apdev, 5)
  1143. def test_sigma_dut_dpp_qr_init_configurator_6(dev, apdev):
  1144. """sigma_dut DPP/QR initiator as Configurator (conf index 6)"""
  1145. run_sigma_dut_dpp_qr_init_configurator(dev, apdev, 6)
  1146. def test_sigma_dut_dpp_qr_init_configurator_7(dev, apdev):
  1147. """sigma_dut DPP/QR initiator as Configurator (conf index 7)"""
  1148. run_sigma_dut_dpp_qr_init_configurator(dev, apdev, 7)
  1149. def test_sigma_dut_dpp_qr_init_configurator_both(dev, apdev):
  1150. """sigma_dut DPP/QR initiator as Configurator or Enrollee (conf index 1)"""
  1151. run_sigma_dut_dpp_qr_init_configurator(dev, apdev, 1, "Both")
  1152. def test_sigma_dut_dpp_qr_init_configurator_neg_freq(dev, apdev):
  1153. """sigma_dut DPP/QR initiator as Configurator (neg_freq)"""
  1154. run_sigma_dut_dpp_qr_init_configurator(dev, apdev, 1, extra='DPPSubsequentChannel,81/11')
  1155. def run_sigma_dut_dpp_qr_init_configurator(dev, apdev, conf_idx,
  1156. prov_role="Configurator",
  1157. extra=None):
  1158. check_dpp_capab(dev[0])
  1159. check_dpp_capab(dev[1])
  1160. sigma = start_sigma_dut(dev[0].ifname)
  1161. try:
  1162. addr = dev[1].own_addr().replace(':', '')
  1163. cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/6 mac=" + addr
  1164. res = dev[1].request(cmd)
  1165. if "FAIL" in res:
  1166. raise Exception("Failed to generate bootstrapping info")
  1167. id0 = int(res)
  1168. uri0 = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
  1169. cmd = "DPP_LISTEN 2437 role=enrollee"
  1170. if "OK" not in dev[1].request(cmd):
  1171. raise Exception("Failed to start listen operation")
  1172. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,SetPeerBootstrap,DPPBootstrappingdata,%s,DPPBS,QR" % uri0.encode('hex'))
  1173. if "status,COMPLETE" not in res:
  1174. raise Exception("dev_exec_action did not succeed: " + res)
  1175. cmd = "dev_exec_action,program,DPP,DPPActionType,AutomaticDPP,DPPAuthRole,Initiator,DPPAuthDirection,Single,DPPProvisioningRole,%s,DPPConfIndex,%d,DPPSigningKeyECC,P-256,DPPConfEnrolleeRole,STA,DPPBS,QR,DPPTimeout,6" % (prov_role, conf_idx)
  1176. if extra:
  1177. cmd += "," + extra
  1178. res = sigma_dut_cmd(cmd)
  1179. if "BootstrapResult,OK,AuthResult,OK,ConfResult,OK" not in res:
  1180. raise Exception("Unexpected result: " + res)
  1181. finally:
  1182. stop_sigma_dut(sigma)
  1183. def test_sigma_dut_dpp_pkex_init_configurator(dev, apdev):
  1184. """sigma_dut DPP/PKEX initiator as Configurator"""
  1185. check_dpp_capab(dev[0])
  1186. check_dpp_capab(dev[1])
  1187. sigma = start_sigma_dut(dev[0].ifname)
  1188. try:
  1189. cmd = "DPP_BOOTSTRAP_GEN type=pkex"
  1190. res = dev[1].request(cmd)
  1191. if "FAIL" in res:
  1192. raise Exception("Failed to generate bootstrapping info")
  1193. id1 = int(res)
  1194. cmd = "DPP_PKEX_ADD own=%d identifier=test code=secret" % (id1)
  1195. res = dev[1].request(cmd)
  1196. if "FAIL" in res:
  1197. raise Exception("Failed to set PKEX data (responder)")
  1198. cmd = "DPP_LISTEN 2437 role=enrollee"
  1199. if "OK" not in dev[1].request(cmd):
  1200. raise Exception("Failed to start listen operation")
  1201. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,AutomaticDPP,DPPAuthRole,Initiator,DPPProvisioningRole,Configurator,DPPConfIndex,1,DPPSigningKeyECC,P-256,DPPConfEnrolleeRole,STA,DPPBS,PKEX,DPPPKEXCodeIdentifier,test,DPPPKEXCode,secret,DPPTimeout,6")
  1202. if "BootstrapResult,OK,AuthResult,OK,ConfResult,OK" not in res:
  1203. raise Exception("Unexpected result: " + res)
  1204. finally:
  1205. stop_sigma_dut(sigma)
  1206. def dpp_init_conf(dev, id1, conf, conf_id, extra):
  1207. logger.info("Starting DPP initiator/configurator in a thread")
  1208. cmd = "DPP_AUTH_INIT peer=%d conf=%s %s configurator=%d" % (id1, conf, extra, conf_id)
  1209. if "OK" not in dev.request(cmd):
  1210. raise Exception("Failed to initiate DPP Authentication")
  1211. ev = dev.wait_event(["DPP-CONF-SENT"], timeout=5)
  1212. if ev is None:
  1213. raise Exception("DPP configuration not completed (Configurator)")
  1214. logger.info("DPP initiator/configurator done")
  1215. def test_sigma_dut_ap_dpp_qr(dev, apdev, params):
  1216. """sigma_dut controlled AP (DPP)"""
  1217. run_sigma_dut_ap_dpp_qr(dev, apdev, params, "ap-dpp", "sta-dpp")
  1218. def test_sigma_dut_ap_dpp_qr_legacy(dev, apdev, params):
  1219. """sigma_dut controlled AP (legacy)"""
  1220. run_sigma_dut_ap_dpp_qr(dev, apdev, params, "ap-psk", "sta-psk",
  1221. extra="pass=%s" % "qwertyuiop".encode("hex"))
  1222. def test_sigma_dut_ap_dpp_qr_legacy_psk(dev, apdev, params):
  1223. """sigma_dut controlled AP (legacy)"""
  1224. run_sigma_dut_ap_dpp_qr(dev, apdev, params, "ap-psk", "sta-psk",
  1225. extra="psk=%s" % (32*"12"))
  1226. def run_sigma_dut_ap_dpp_qr(dev, apdev, params, ap_conf, sta_conf, extra=""):
  1227. check_dpp_capab(dev[0])
  1228. logdir = os.path.join(params['logdir'], "sigma_dut_ap_dpp_qr.sigma-hostapd")
  1229. with HWSimRadio() as (radio, iface):
  1230. sigma = start_sigma_dut(iface, hostapd_logdir=logdir)
  1231. try:
  1232. sigma_dut_cmd_check("ap_reset_default,program,DPP")
  1233. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,GetLocalBootstrap,DPPCryptoIdentifier,P-256,DPPBS,QR")
  1234. if "status,COMPLETE" not in res:
  1235. raise Exception("dev_exec_action did not succeed: " + res)
  1236. hex = res.split(',')[3]
  1237. uri = hex.decode('hex')
  1238. logger.info("URI from sigma_dut: " + uri)
  1239. cmd = "DPP_CONFIGURATOR_ADD"
  1240. res = dev[0].request(cmd);
  1241. if "FAIL" in res:
  1242. raise Exception("Failed to add configurator")
  1243. conf_id = int(res)
  1244. res = dev[0].request("DPP_QR_CODE " + uri)
  1245. if "FAIL" in res:
  1246. raise Exception("Failed to parse QR Code URI")
  1247. id1 = int(res)
  1248. t = threading.Thread(target=dpp_init_conf,
  1249. args=(dev[0], id1, ap_conf, conf_id, extra))
  1250. t.start()
  1251. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,AutomaticDPP,DPPAuthRole,Responder,DPPAuthDirection,Single,DPPProvisioningRole,Enrollee,DPPBS,QR,DPPTimeout,6")
  1252. t.join()
  1253. if "ConfResult,OK" not in res:
  1254. raise Exception("Unexpected result: " + res)
  1255. addr = dev[1].own_addr().replace(':', '')
  1256. cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
  1257. res = dev[1].request(cmd)
  1258. if "FAIL" in res:
  1259. raise Exception("Failed to generate bootstrapping info")
  1260. id1 = int(res)
  1261. uri1 = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id1)
  1262. res = dev[0].request("DPP_QR_CODE " + uri1)
  1263. if "FAIL" in res:
  1264. raise Exception("Failed to parse QR Code URI")
  1265. id0b = int(res)
  1266. dev[1].set("dpp_config_processing", "2")
  1267. cmd = "DPP_LISTEN 2412"
  1268. if "OK" not in dev[1].request(cmd):
  1269. raise Exception("Failed to start listen operation")
  1270. cmd = "DPP_AUTH_INIT peer=%d conf=%s %s configurator=%d" % (id0b, sta_conf, extra, conf_id)
  1271. if "OK" not in dev[0].request(cmd):
  1272. raise Exception("Failed to initiate DPP Authentication")
  1273. dev[1].wait_connected()
  1274. sigma_dut_cmd_check("ap_reset_default")
  1275. finally:
  1276. dev[1].set("dpp_config_processing", "0")
  1277. stop_sigma_dut(sigma)
  1278. def test_sigma_dut_ap_dpp_pkex_responder(dev, apdev, params):
  1279. """sigma_dut controlled AP as DPP PKEX responder"""
  1280. check_dpp_capab(dev[0])
  1281. logdir = os.path.join(params['logdir'],
  1282. "sigma_dut_ap_dpp_pkex_responder.sigma-hostapd")
  1283. with HWSimRadio() as (radio, iface):
  1284. sigma = start_sigma_dut(iface, hostapd_logdir=logdir)
  1285. try:
  1286. run_sigma_dut_ap_dpp_pkex_responder(dev, apdev)
  1287. finally:
  1288. stop_sigma_dut(sigma)
  1289. def dpp_init_conf_pkex(dev, conf_id):
  1290. logger.info("Starting DPP PKEX initiator/configurator in a thread")
  1291. time.sleep(1.5)
  1292. cmd = "DPP_BOOTSTRAP_GEN type=pkex"
  1293. res = dev.request(cmd)
  1294. if "FAIL" in res:
  1295. raise Exception("Failed to generate bootstrapping info")
  1296. id = int(res)
  1297. cmd = "DPP_PKEX_ADD own=%d init=1 conf=ap-dpp configurator=%d code=password" % (id, conf_id)
  1298. res = dev.request(cmd)
  1299. if "FAIL" in res:
  1300. raise Exception("Failed to initiate DPP PKEX")
  1301. ev = dev.wait_event(["DPP-CONF-SENT"], timeout=5)
  1302. if ev is None:
  1303. raise Exception("DPP configuration not completed (Configurator)")
  1304. logger.info("DPP initiator/configurator done")
  1305. def run_sigma_dut_ap_dpp_pkex_responder(dev, apdev):
  1306. sigma_dut_cmd_check("ap_reset_default,program,DPP")
  1307. cmd = "DPP_CONFIGURATOR_ADD"
  1308. res = dev[0].request(cmd);
  1309. if "FAIL" in res:
  1310. raise Exception("Failed to add configurator")
  1311. conf_id = int(res)
  1312. t = threading.Thread(target=dpp_init_conf_pkex, args=(dev[0], conf_id))
  1313. t.start()
  1314. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,AutomaticDPP,DPPAuthRole,Responder,DPPAuthDirection,Mutual,DPPProvisioningRole,Enrollee,DPPBS,PKEX,DPPPKEXCode,password,DPPTimeout,6", timeout=10)
  1315. t.join()
  1316. if "BootstrapResult,OK,AuthResult,OK,ConfResult,OK" not in res:
  1317. raise Exception("Unexpected result: " + res)
  1318. sigma_dut_cmd_check("ap_reset_default")
  1319. def dpp_proto_init(dev, id1):
  1320. time.sleep(1)
  1321. logger.info("Starting DPP initiator/configurator in a thread")
  1322. cmd = "DPP_CONFIGURATOR_ADD"
  1323. res = dev.request(cmd);
  1324. if "FAIL" in res:
  1325. raise Exception("Failed to add configurator")
  1326. conf_id = int(res)
  1327. cmd = "DPP_AUTH_INIT peer=%d conf=sta-dpp configurator=%d" % (id1, conf_id)
  1328. if "OK" not in dev.request(cmd):
  1329. raise Exception("Failed to initiate DPP Authentication")
  1330. def test_sigma_dut_dpp_proto_initiator(dev, apdev):
  1331. """sigma_dut DPP protocol testing - Initiator"""
  1332. check_dpp_capab(dev[0])
  1333. check_dpp_capab(dev[1])
  1334. tests = [ ("InvalidValue", "AuthenticationRequest", "WrappedData",
  1335. "BootstrapResult,OK,AuthResult,Errorsent",
  1336. None),
  1337. ("InvalidValue", "AuthenticationConfirm", "WrappedData",
  1338. "BootstrapResult,OK,AuthResult,Errorsent",
  1339. None),
  1340. ("MissingAttribute", "AuthenticationRequest", "InitCapabilities",
  1341. "BootstrapResult,OK,AuthResult,Errorsent",
  1342. "Missing or invalid I-capabilities"),
  1343. ("InvalidValue", "AuthenticationConfirm", "InitAuthTag",
  1344. "BootstrapResult,OK,AuthResult,Errorsent",
  1345. "Mismatching Initiator Authenticating Tag"),
  1346. ("MissingAttribute", "ConfigurationResponse", "EnrolleeNonce",
  1347. "BootstrapResult,OK,AuthResult,OK,ConfResult,Errorsent",
  1348. "Missing or invalid Enrollee Nonce attribute") ]
  1349. for step, frame, attr, result, fail in tests:
  1350. dev[0].request("FLUSH")
  1351. dev[1].request("FLUSH")
  1352. sigma = start_sigma_dut(dev[0].ifname)
  1353. try:
  1354. run_sigma_dut_dpp_proto_initiator(dev, step, frame, attr, result,
  1355. fail)
  1356. finally:
  1357. stop_sigma_dut(sigma)
  1358. def run_sigma_dut_dpp_proto_initiator(dev, step, frame, attr, result, fail):
  1359. addr = dev[1].own_addr().replace(':', '')
  1360. cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/6 mac=" + addr
  1361. res = dev[1].request(cmd)
  1362. if "FAIL" in res:
  1363. raise Exception("Failed to generate bootstrapping info")
  1364. id0 = int(res)
  1365. uri0 = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
  1366. cmd = "DPP_LISTEN 2437 role=enrollee"
  1367. if "OK" not in dev[1].request(cmd):
  1368. raise Exception("Failed to start listen operation")
  1369. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,SetPeerBootstrap,DPPBootstrappingdata,%s,DPPBS,QR" % uri0.encode('hex'))
  1370. if "status,COMPLETE" not in res:
  1371. raise Exception("dev_exec_action did not succeed: " + res)
  1372. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,AutomaticDPP,DPPAuthRole,Initiator,DPPAuthDirection,Single,DPPProvisioningRole,Configurator,DPPConfIndex,1,DPPSigningKeyECC,P-256,DPPConfEnrolleeRole,STA,DPPBS,QR,DPPTimeout,6,DPPStep,%s,DPPFrameType,%s,DPPIEAttribute,%s" % (step, frame, attr),
  1373. timeout=10)
  1374. if result not in res:
  1375. raise Exception("Unexpected result: " + res)
  1376. if fail:
  1377. ev = dev[1].wait_event(["DPP-FAIL"], timeout=5)
  1378. if ev is None or fail not in ev:
  1379. raise Exception("Failure not reported correctly: " + str(ev))
  1380. dev[1].request("DPP_STOP_LISTEN")
  1381. dev[0].dump_monitor()
  1382. dev[1].dump_monitor()
  1383. def test_sigma_dut_dpp_proto_responder(dev, apdev):
  1384. """sigma_dut DPP protocol testing - Responder"""
  1385. check_dpp_capab(dev[0])
  1386. check_dpp_capab(dev[1])
  1387. tests = [ ("MissingAttribute", "AuthenticationResponse", "DPPStatus",
  1388. "BootstrapResult,OK,AuthResult,Errorsent",
  1389. "Missing or invalid required DPP Status attribute"),
  1390. ("MissingAttribute", "ConfigurationRequest", "EnrolleeNonce",
  1391. "BootstrapResult,OK,AuthResult,OK,ConfResult,Errorsent",
  1392. "Missing or invalid Enrollee Nonce attribute") ]
  1393. for step, frame, attr, result, fail in tests:
  1394. dev[0].request("FLUSH")
  1395. dev[1].request("FLUSH")
  1396. sigma = start_sigma_dut(dev[0].ifname)
  1397. try:
  1398. run_sigma_dut_dpp_proto_responder(dev, step, frame, attr, result,
  1399. fail)
  1400. finally:
  1401. stop_sigma_dut(sigma)
  1402. def run_sigma_dut_dpp_proto_responder(dev, step, frame, attr, result, fail):
  1403. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,GetLocalBootstrap,DPPCryptoIdentifier,P-256,DPPBS,QR")
  1404. if "status,COMPLETE" not in res:
  1405. raise Exception("dev_exec_action did not succeed: " + res)
  1406. hex = res.split(',')[3]
  1407. uri = hex.decode('hex')
  1408. logger.info("URI from sigma_dut: " + uri)
  1409. res = dev[1].request("DPP_QR_CODE " + uri)
  1410. if "FAIL" in res:
  1411. raise Exception("Failed to parse QR Code URI")
  1412. id1 = int(res)
  1413. t = threading.Thread(target=dpp_proto_init, args=(dev[1], id1))
  1414. t.start()
  1415. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,AutomaticDPP,DPPAuthRole,Responder,DPPAuthDirection,Single,DPPProvisioningRole,Enrollee,DPPConfIndex,1,DPPSigningKeyECC,P-256,DPPConfEnrolleeRole,STA,DPPBS,QR,DPPTimeout,6,DPPStep,%s,DPPFrameType,%s,DPPIEAttribute,%s" % (step, frame, attr), timeout=10)
  1416. t.join()
  1417. if result not in res:
  1418. raise Exception("Unexpected result: " + res)
  1419. if fail:
  1420. ev = dev[1].wait_event(["DPP-FAIL"], timeout=5)
  1421. if ev is None or fail not in ev:
  1422. raise Exception("Failure not reported correctly:" + str(ev))
  1423. dev[1].request("DPP_STOP_LISTEN")
  1424. dev[0].dump_monitor()
  1425. dev[1].dump_monitor()
  1426. def test_sigma_dut_dpp_proto_stop_at_initiator(dev, apdev):
  1427. """sigma_dut DPP protocol testing - Stop at RX on Initiator"""
  1428. check_dpp_capab(dev[0])
  1429. check_dpp_capab(dev[1])
  1430. tests = [ ("AuthenticationResponse",
  1431. "BootstrapResult,OK,AuthResult,Errorsent",
  1432. None),
  1433. ("ConfigurationRequest",
  1434. "BootstrapResult,OK,AuthResult,OK,ConfResult,Errorsent",
  1435. None)]
  1436. for frame, result, fail in tests:
  1437. dev[0].request("FLUSH")
  1438. dev[1].request("FLUSH")
  1439. sigma = start_sigma_dut(dev[0].ifname)
  1440. try:
  1441. run_sigma_dut_dpp_proto_stop_at_initiator(dev, frame, result, fail)
  1442. finally:
  1443. stop_sigma_dut(sigma)
  1444. def run_sigma_dut_dpp_proto_stop_at_initiator(dev, frame, result, fail):
  1445. addr = dev[1].own_addr().replace(':', '')
  1446. cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/6 mac=" + addr
  1447. res = dev[1].request(cmd)
  1448. if "FAIL" in res:
  1449. raise Exception("Failed to generate bootstrapping info")
  1450. id0 = int(res)
  1451. uri0 = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
  1452. cmd = "DPP_LISTEN 2437 role=enrollee"
  1453. if "OK" not in dev[1].request(cmd):
  1454. raise Exception("Failed to start listen operation")
  1455. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,SetPeerBootstrap,DPPBootstrappingdata,%s,DPPBS,QR" % uri0.encode('hex'))
  1456. if "status,COMPLETE" not in res:
  1457. raise Exception("dev_exec_action did not succeed: " + res)
  1458. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,AutomaticDPP,DPPAuthRole,Initiator,DPPAuthDirection,Single,DPPProvisioningRole,Configurator,DPPConfIndex,1,DPPSigningKeyECC,P-256,DPPConfEnrolleeRole,STA,DPPBS,QR,DPPTimeout,6,DPPStep,Timeout,DPPFrameType,%s" % (frame))
  1459. if result not in res:
  1460. raise Exception("Unexpected result: " + res)
  1461. if fail:
  1462. ev = dev[1].wait_event(["DPP-FAIL"], timeout=5)
  1463. if ev is None or fail not in ev:
  1464. raise Exception("Failure not reported correctly: " + str(ev))
  1465. dev[1].request("DPP_STOP_LISTEN")
  1466. dev[0].dump_monitor()
  1467. dev[1].dump_monitor()
  1468. def test_sigma_dut_dpp_proto_stop_at_responder(dev, apdev):
  1469. """sigma_dut DPP protocol testing - Stop at RX on Responder"""
  1470. check_dpp_capab(dev[0])
  1471. check_dpp_capab(dev[1])
  1472. tests = [ ("AuthenticationRequest",
  1473. "BootstrapResult,OK,AuthResult,Errorsent",
  1474. None),
  1475. ("AuthenticationConfirm",
  1476. "BootstrapResult,OK,AuthResult,Errorsent",
  1477. None) ]
  1478. for frame, result, fail in tests:
  1479. dev[0].request("FLUSH")
  1480. dev[1].request("FLUSH")
  1481. sigma = start_sigma_dut(dev[0].ifname)
  1482. try:
  1483. run_sigma_dut_dpp_proto_stop_at_responder(dev, frame, result, fail)
  1484. finally:
  1485. stop_sigma_dut(sigma)
  1486. def run_sigma_dut_dpp_proto_stop_at_responder(dev, frame, result, fail):
  1487. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,GetLocalBootstrap,DPPCryptoIdentifier,P-256,DPPBS,QR")
  1488. if "status,COMPLETE" not in res:
  1489. raise Exception("dev_exec_action did not succeed: " + res)
  1490. hex = res.split(',')[3]
  1491. uri = hex.decode('hex')
  1492. logger.info("URI from sigma_dut: " + uri)
  1493. res = dev[1].request("DPP_QR_CODE " + uri)
  1494. if "FAIL" in res:
  1495. raise Exception("Failed to parse QR Code URI")
  1496. id1 = int(res)
  1497. t = threading.Thread(target=dpp_proto_init, args=(dev[1], id1))
  1498. t.start()
  1499. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,AutomaticDPP,DPPAuthRole,Responder,DPPAuthDirection,Single,DPPProvisioningRole,Enrollee,DPPConfIndex,1,DPPSigningKeyECC,P-256,DPPConfEnrolleeRole,STA,DPPBS,QR,DPPTimeout,6,DPPStep,Timeout,DPPFrameType,%s" % (frame), timeout=10)
  1500. t.join()
  1501. if result not in res:
  1502. raise Exception("Unexpected result: " + res)
  1503. if fail:
  1504. ev = dev[1].wait_event(["DPP-FAIL"], timeout=5)
  1505. if ev is None or fail not in ev:
  1506. raise Exception("Failure not reported correctly:" + str(ev))
  1507. dev[1].request("DPP_STOP_LISTEN")
  1508. dev[0].dump_monitor()
  1509. dev[1].dump_monitor()
  1510. def dpp_proto_init_pkex(dev):
  1511. time.sleep(1)
  1512. logger.info("Starting DPP PKEX initiator/configurator in a thread")
  1513. cmd = "DPP_CONFIGURATOR_ADD"
  1514. res = dev.request(cmd);
  1515. if "FAIL" in res:
  1516. raise Exception("Failed to add configurator")
  1517. conf_id = int(res)
  1518. cmd = "DPP_BOOTSTRAP_GEN type=pkex"
  1519. res = dev.request(cmd)
  1520. if "FAIL" in res:
  1521. raise Exception("Failed to generate bootstrapping info")
  1522. id = int(res)
  1523. cmd = "DPP_PKEX_ADD own=%d init=1 conf=sta-dpp configurator=%d code=secret" % (id, conf_id)
  1524. if "FAIL" in dev.request(cmd):
  1525. raise Exception("Failed to initiate DPP PKEX")
  1526. def test_sigma_dut_dpp_proto_initiator_pkex(dev, apdev):
  1527. """sigma_dut DPP protocol testing - Initiator (PKEX)"""
  1528. check_dpp_capab(dev[0])
  1529. check_dpp_capab(dev[1])
  1530. tests = [ ("InvalidValue", "PKEXCRRequest", "WrappedData",
  1531. "BootstrapResult,Errorsent",
  1532. None),
  1533. ("MissingAttribute", "PKEXExchangeRequest", "FiniteCyclicGroup",
  1534. "BootstrapResult,Errorsent",
  1535. "Missing or invalid Finite Cyclic Group attribute"),
  1536. ("MissingAttribute", "PKEXCRRequest", "BSKey",
  1537. "BootstrapResult,Errorsent",
  1538. "No valid peer bootstrapping key found") ]
  1539. for step, frame, attr, result, fail in tests:
  1540. dev[0].request("FLUSH")
  1541. dev[1].request("FLUSH")
  1542. sigma = start_sigma_dut(dev[0].ifname)
  1543. try:
  1544. run_sigma_dut_dpp_proto_initiator_pkex(dev, step, frame, attr,
  1545. result, fail)
  1546. finally:
  1547. stop_sigma_dut(sigma)
  1548. def run_sigma_dut_dpp_proto_initiator_pkex(dev, step, frame, attr, result, fail):
  1549. cmd = "DPP_BOOTSTRAP_GEN type=pkex"
  1550. res = dev[1].request(cmd)
  1551. if "FAIL" in res:
  1552. raise Exception("Failed to generate bootstrapping info")
  1553. id1 = int(res)
  1554. cmd = "DPP_PKEX_ADD own=%d code=secret" % (id1)
  1555. res = dev[1].request(cmd)
  1556. if "FAIL" in res:
  1557. raise Exception("Failed to set PKEX data (responder)")
  1558. cmd = "DPP_LISTEN 2437 role=enrollee"
  1559. if "OK" not in dev[1].request(cmd):
  1560. raise Exception("Failed to start listen operation")
  1561. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,AutomaticDPP,DPPAuthRole,Initiator,DPPAuthDirection,Single,DPPProvisioningRole,Configurator,DPPConfIndex,1,DPPSigningKeyECC,P-256,DPPConfEnrolleeRole,STA,DPPBS,PKEX,DPPPKEXCode,secret,DPPTimeout,6,DPPStep,%s,DPPFrameType,%s,DPPIEAttribute,%s" % (step, frame, attr))
  1562. if result not in res:
  1563. raise Exception("Unexpected result: " + res)
  1564. if fail:
  1565. ev = dev[1].wait_event(["DPP-FAIL"], timeout=5)
  1566. if ev is None or fail not in ev:
  1567. raise Exception("Failure not reported correctly: " + str(ev))
  1568. dev[1].request("DPP_STOP_LISTEN")
  1569. dev[0].dump_monitor()
  1570. dev[1].dump_monitor()
  1571. def test_sigma_dut_dpp_proto_responder_pkex(dev, apdev):
  1572. """sigma_dut DPP protocol testing - Responder (PKEX)"""
  1573. check_dpp_capab(dev[0])
  1574. check_dpp_capab(dev[1])
  1575. tests = [ ("InvalidValue", "PKEXCRResponse", "WrappedData",
  1576. "BootstrapResult,Errorsent",
  1577. None),
  1578. ("MissingAttribute", "PKEXExchangeResponse", "DPPStatus",
  1579. "BootstrapResult,Errorsent",
  1580. "No DPP Status attribute"),
  1581. ("MissingAttribute", "PKEXCRResponse", "BSKey",
  1582. "BootstrapResult,Errorsent",
  1583. "No valid peer bootstrapping key found") ]
  1584. for step, frame, attr, result, fail in tests:
  1585. dev[0].request("FLUSH")
  1586. dev[1].request("FLUSH")
  1587. sigma = start_sigma_dut(dev[0].ifname)
  1588. try:
  1589. run_sigma_dut_dpp_proto_responder_pkex(dev, step, frame, attr,
  1590. result, fail)
  1591. finally:
  1592. stop_sigma_dut(sigma)
  1593. def run_sigma_dut_dpp_proto_responder_pkex(dev, step, frame, attr, result, fail):
  1594. t = threading.Thread(target=dpp_proto_init_pkex, args=(dev[1],))
  1595. t.start()
  1596. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,AutomaticDPP,DPPAuthRole,Responder,DPPAuthDirection,Single,DPPProvisioningRole,Enrollee,DPPConfIndex,1,DPPSigningKeyECC,P-256,DPPConfEnrolleeRole,STA,DPPBS,PKEX,DPPPKEXCode,secret,DPPTimeout,6,DPPStep,%s,DPPFrameType,%s,DPPIEAttribute,%s" % (step, frame, attr), timeout=10)
  1597. t.join()
  1598. if result not in res:
  1599. raise Exception("Unexpected result: " + res)
  1600. if fail:
  1601. ev = dev[1].wait_event(["DPP-FAIL"], timeout=5)
  1602. if ev is None or fail not in ev:
  1603. raise Exception("Failure not reported correctly:" + str(ev))
  1604. dev[1].request("DPP_STOP_LISTEN")
  1605. dev[0].dump_monitor()
  1606. dev[1].dump_monitor()
  1607. def init_sigma_dut_dpp_proto_peer_disc_req(dev, apdev):
  1608. check_dpp_capab(dev[0])
  1609. check_dpp_capab(dev[1])
  1610. csign = "30770201010420768240a3fc89d6662d9782f120527fe7fb9edc6366ab0b9c7dde96125cfd250fa00a06082a8648ce3d030107a144034200042908e1baf7bf413cc66f9e878a03e8bb1835ba94b033dbe3d6969fc8575d5eb5dfda1cb81c95cee21d0cd7d92ba30541ffa05cb6296f5dd808b0c1c2a83c0708"
  1611. csign_pub = "3059301306072a8648ce3d020106082a8648ce3d030107034200042908e1baf7bf413cc66f9e878a03e8bb1835ba94b033dbe3d6969fc8575d5eb5dfda1cb81c95cee21d0cd7d92ba30541ffa05cb6296f5dd808b0c1c2a83c0708"
  1612. ap_connector = "eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJwYWtZbXVzd1dCdWpSYTl5OEsweDViaTVrT3VNT3dzZHRlaml2UG55ZHZzIiwiYWxnIjoiRVMyNTYifQ.eyJncm91cHMiOlt7Imdyb3VwSWQiOiIqIiwibmV0Um9sZSI6ImFwIn1dLCJuZXRBY2Nlc3NLZXkiOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiIybU5vNXZuRkI5bEw3d1VWb1hJbGVPYzBNSEE1QXZKbnpwZXZULVVTYzVNIiwieSI6IlhzS3dqVHJlLTg5WWdpU3pKaG9CN1haeUttTU05OTl3V2ZaSVl0bi01Q3MifX0.XhjFpZgcSa7G2lHy0OCYTvaZFRo5Hyx6b7g7oYyusLC7C_73AJ4_BxEZQVYJXAtDuGvb3dXSkHEKxREP9Q6Qeg"
  1613. ap_netaccesskey = "30770201010420ceba752db2ad5200fa7bc565b9c05c69b7eb006751b0b329b0279de1c19ca67ca00a06082a8648ce3d030107a14403420004da6368e6f9c507d94bef0515a1722578e73430703902f267ce97af4fe51273935ec2b08d3adefbcf588224b3261a01ed76722a630cf7df7059f64862d9fee42b"
  1614. params = { "ssid": "DPPNET01",
  1615. "wpa": "2",
  1616. "wpa_key_mgmt": "DPP",
  1617. "rsn_pairwise": "CCMP",
  1618. "dpp_connector": ap_connector,
  1619. "dpp_csign": csign_pub,
  1620. "dpp_netaccesskey": ap_netaccesskey }
  1621. try:
  1622. hapd = hostapd.add_ap(apdev[0], params)
  1623. except:
  1624. raise HwsimSkip("DPP not supported")
  1625. dev[0].set("dpp_config_processing", "2")
  1626. cmd = "DPP_CONFIGURATOR_ADD key=" + csign
  1627. res = dev[1].request(cmd);
  1628. if "FAIL" in res:
  1629. raise Exception("Failed to add configurator")
  1630. conf_id = int(res)
  1631. addr = dev[1].own_addr().replace(':', '')
  1632. cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/6 mac=" + addr
  1633. res = dev[1].request(cmd)
  1634. if "FAIL" in res:
  1635. raise Exception("Failed to generate bootstrapping info")
  1636. id0 = int(res)
  1637. uri0 = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
  1638. dev[1].set("dpp_configurator_params",
  1639. " conf=sta-dpp ssid=%s configurator=%d" % ("DPPNET01".encode("hex"), conf_id));
  1640. cmd = "DPP_LISTEN 2437 role=configurator"
  1641. if "OK" not in dev[1].request(cmd):
  1642. raise Exception("Failed to start listen operation")
  1643. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,SetPeerBootstrap,DPPBootstrappingdata,%s,DPPBS,QR" % uri0.encode('hex'))
  1644. if "status,COMPLETE" not in res:
  1645. raise Exception("dev_exec_action did not succeed: " + res)
  1646. def test_sigma_dut_dpp_proto_peer_disc_req(dev, apdev):
  1647. """sigma_dut DPP protocol testing - Peer Discovery Request"""
  1648. sigma = start_sigma_dut(dev[0].ifname)
  1649. try:
  1650. init_sigma_dut_dpp_proto_peer_disc_req(dev, apdev)
  1651. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,AutomaticDPP,DPPAuthRole,Initiator,DPPAuthDirection,Single,DPPProvisioningRole,Enrollee,DPPBS,QR,DPPTimeout,6,DPPWaitForConnect,Yes,DPPStep,MissingAttribute,DPPFrameType,PeerDiscoveryRequest,DPPIEAttribute,TransactionID", timeout=10)
  1652. if "BootstrapResult,OK,AuthResult,OK,ConfResult,OK,NetworkIntroResult,Errorsent" not in res:
  1653. raise Exception("Unexpected result: " + res)
  1654. finally:
  1655. dev[0].set("dpp_config_processing", "0")
  1656. stop_sigma_dut(sigma)
  1657. def test_sigma_dut_dpp_self_config(dev, apdev):
  1658. """sigma_dut DPP Configurator enrolling an AP and using self-configuration"""
  1659. check_dpp_capab(dev[0])
  1660. hapd = hostapd.add_ap(apdev[0], { "ssid": "unconfigured" })
  1661. check_dpp_capab(hapd)
  1662. sigma = start_sigma_dut(dev[0].ifname)
  1663. try:
  1664. dev[0].set("dpp_config_processing", "2")
  1665. addr = hapd.own_addr().replace(':', '')
  1666. cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
  1667. res = hapd.request(cmd)
  1668. if "FAIL" in res:
  1669. raise Exception("Failed to generate bootstrapping info")
  1670. id = int(res)
  1671. uri = hapd.request("DPP_BOOTSTRAP_GET_URI %d" % id)
  1672. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,SetPeerBootstrap,DPPBootstrappingdata,%s,DPPBS,QR" % uri.encode('hex'))
  1673. if "status,COMPLETE" not in res:
  1674. raise Exception("dev_exec_action did not succeed: " + res)
  1675. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,AutomaticDPP,DPPAuthRole,Initiator,DPPAuthDirection,Single,DPPProvisioningRole,Configurator,DPPConfIndex,1,DPPSigningKeyECC,P-256,DPPConfEnrolleeRole,AP,DPPBS,QR,DPPTimeout,6")
  1676. if "BootstrapResult,OK,AuthResult,OK,ConfResult,OK" not in res:
  1677. raise Exception("Unexpected result: " + res)
  1678. update_hapd_config(hapd)
  1679. cmd = "dev_exec_action,program,DPP,DPPActionType,AutomaticDPP,DPPCryptoIdentifier,P-256,DPPBS,QR,DPPAuthRole,Initiator,DPPProvisioningRole,Configurator,DPPAuthDirection,Single,DPPConfIndex,1,DPPTimeout,6,DPPWaitForConnect,Yes,DPPSelfConfigure,Yes"
  1680. res = sigma_dut_cmd(cmd, timeout=10)
  1681. if "BootstrapResult,OK,AuthResult,OK,ConfResult,OK,NetworkIntroResult,OK,NetworkConnectResult,OK" not in res:
  1682. raise Exception("Unexpected result: " + res)
  1683. finally:
  1684. stop_sigma_dut(sigma)
  1685. dev[0].set("dpp_config_processing", "0")
  1686. def test_sigma_dut_ap_dpp_self_config(dev, apdev, params):
  1687. """sigma_dut DPP AP Configurator using self-configuration"""
  1688. logdir = os.path.join(params['logdir'],
  1689. "sigma_dut_ap_dpp_self_config.sigma-hostapd")
  1690. with HWSimRadio() as (radio, iface):
  1691. sigma = start_sigma_dut(iface, hostapd_logdir=logdir)
  1692. try:
  1693. run_sigma_dut_ap_dpp_self_config(dev, apdev)
  1694. finally:
  1695. stop_sigma_dut(sigma)
  1696. dev[0].set("dpp_config_processing", "0")
  1697. def run_sigma_dut_ap_dpp_self_config(dev, apdev):
  1698. check_dpp_capab(dev[0])
  1699. sigma_dut_cmd_check("ap_reset_default,program,DPP")
  1700. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,AutomaticDPP,DPPAuthRole,Initiator,DPPAuthDirection,Single,DPPProvisioningRole,Configurator,DPPConfEnrolleeRole,AP,DPPBS,QR,DPPConfIndex,1,DPPSelfConfigure,Yes,DPPTimeout,6", timeout=10)
  1701. if "BootstrapResult,OK,AuthResult,OK,ConfResult,OK" not in res:
  1702. raise Exception("Unexpected result: " + res)
  1703. dev[0].set("dpp_config_processing", "2")
  1704. addr = dev[0].own_addr().replace(':', '')
  1705. cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/11 mac=" + addr
  1706. res = dev[0].request(cmd)
  1707. if "FAIL" in res:
  1708. raise Exception("Failed to generate bootstrapping info")
  1709. id = int(res)
  1710. uri = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id)
  1711. cmd = "DPP_LISTEN 2462 role=enrollee"
  1712. if "OK" not in dev[0].request(cmd):
  1713. raise Exception("Failed to start listen operation")
  1714. res = sigma_dut_cmd("dev_exec_action,program,DPP,DPPActionType,SetPeerBootstrap,DPPBootstrappingdata,%s,DPPBS,QR" % uri.encode('hex'))
  1715. if "status,COMPLETE" not in res:
  1716. raise Exception("dev_exec_action did not succeed: " + res)
  1717. cmd = "dev_exec_action,program,DPP,DPPActionType,AutomaticDPP,DPPAuthRole,Initiator,DPPAuthDirection,Single,DPPProvisioningRole,Configurator,DPPConfIndex,1,DPPSigningKeyECC,P-256,DPPConfEnrolleeRole,STA,DPPBS,QR,DPPTimeout,6"
  1718. res = sigma_dut_cmd(cmd)
  1719. if "BootstrapResult,OK,AuthResult,OK,ConfResult,OK" not in res:
  1720. raise Exception("Unexpected result: " + res)
  1721. dev[0].wait_connected()
  1722. dev[0].request("DISCONNECT")
  1723. dev[0].wait_disconnected()
  1724. sigma_dut_cmd_check("ap_reset_default")
  1725. def test_sigma_dut_preconfigured_profile(dev, apdev):
  1726. """sigma_dut controlled connection using preconfigured profile"""
  1727. try:
  1728. run_sigma_dut_preconfigured_profile(dev, apdev)
  1729. finally:
  1730. dev[0].set("ignore_old_scan_res", "0")
  1731. def run_sigma_dut_preconfigured_profile(dev, apdev):
  1732. ifname = dev[0].ifname
  1733. sigma = start_sigma_dut(ifname)
  1734. params = hostapd.wpa2_params(ssid="test-psk", passphrase="12345678")
  1735. hapd = hostapd.add_ap(apdev[0], params)
  1736. dev[0].connect("test-psk", psk="12345678", scan_freq="2412",
  1737. only_add_network=True)
  1738. sigma_dut_cmd_check("sta_set_ip_config,interface,%s,dhcp,0,ip,127.0.0.11,mask,255.255.255.0" % ifname)
  1739. sigma_dut_cmd_check("sta_associate,interface,%s,ssid,%s" % (ifname, "test-psk"))
  1740. sigma_dut_wait_connected(ifname)
  1741. sigma_dut_cmd_check("sta_get_ip_config,interface," + ifname)
  1742. sigma_dut_cmd_check("sta_disconnect,interface," + ifname)
  1743. sigma_dut_cmd_check("sta_reset_default,interface," + ifname)
  1744. stop_sigma_dut(sigma)
  1745. def test_sigma_dut_wps_pbc(dev, apdev):
  1746. """sigma_dut and WPS PBC Enrollee"""
  1747. try:
  1748. run_sigma_dut_wps_pbc(dev, apdev)
  1749. finally:
  1750. dev[0].set("ignore_old_scan_res", "0")
  1751. def run_sigma_dut_wps_pbc(dev, apdev):
  1752. ssid = "test-wps-conf"
  1753. hapd = hostapd.add_ap(apdev[0],
  1754. { "ssid": "wps", "eap_server": "1", "wps_state": "2",
  1755. "wpa_passphrase": "12345678", "wpa": "2",
  1756. "wpa_key_mgmt": "WPA-PSK", "rsn_pairwise": "CCMP" })
  1757. hapd.request("WPS_PBC")
  1758. ifname = dev[0].ifname
  1759. sigma = start_sigma_dut(ifname)
  1760. cmd = "start_wps_registration,interface,%s" % ifname
  1761. cmd += ",WpsRole,Enrollee"
  1762. cmd += ",WpsConfigMethod,PBC"
  1763. sigma_dut_cmd_check(cmd, timeout=15)
  1764. sigma_dut_cmd_check("sta_disconnect,interface," + ifname)
  1765. hapd.disable()
  1766. sigma_dut_cmd_check("sta_reset_default,interface," + ifname)
  1767. stop_sigma_dut(sigma)
  1768. dev[0].flush_scan_cache()
  1769. def test_sigma_dut_sta_scan_bss(dev, apdev):
  1770. """sigma_dut sta_scan_bss"""
  1771. hapd = hostapd.add_ap(apdev[0], { "ssid": "test" })
  1772. sigma = start_sigma_dut(dev[0].ifname)
  1773. try:
  1774. cmd = "sta_scan_bss,Interface,%s,BSSID,%s" % (dev[0].ifname, \
  1775. hapd.own_addr())
  1776. res = sigma_dut_cmd(cmd, timeout=10)
  1777. if "ssid,test,bsschannel,1" not in res:
  1778. raise Exception("Unexpected result: " + res)
  1779. finally:
  1780. stop_sigma_dut(sigma)